<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="1047">
<package pkgid="184da673aa5ab86b8e8a241547a2bfa730ee62a5b3bffcd08943b5a2db7fd3e6" name="389-ds-base" arch="src">
  <version epoch="0" ver="1.4.3.36" rel="3.oe2203sp1"/>
  <changelog author="xu_ping&lt;xuping33@huawei.com&gt; - 1.4.0.31-6" date="1644926400">- Fix attributeError</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 1.4.3.20-1" date="1647345600">- Update to 1.4.3.20 for fix CVE-2020-35518</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1.4.3.20-2" date="1691409600">- add support for sw_64 and loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-1" date="1698148800">- Update to 1.4.3.36
- Fix dsidm user/posixgroup get_dn fails with search_ext()
- Fix unable to add objectclass/attribute without x-origin
- Fix execute dsconf to open pdb</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-2" date="1698408000">- Fix dn2rdn -v error</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-3" date="1698926400">- Fix dirsrv-snmp.service start fail</changelog>
</package>
<package pkgid="4361f18e3aa560527d7142a24b93adc270d4c82d9d683a3fdb13b6a9825294bb" name="389-ds-base" arch="src">
  <version epoch="0" ver="1.4.3.36" rel="5.oe2203sp1"/>
  <changelog author="xu_ping&lt;xuping33@huawei.com&gt; - 1.4.0.31-6" date="1644926400">- Fix attributeError</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 1.4.3.20-1" date="1647345600">- Update to 1.4.3.20 for fix CVE-2020-35518</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1.4.3.20-2" date="1691409600">- add support for sw_64 and loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-1" date="1698148800">- Update to 1.4.3.36
- Fix dsidm user/posixgroup get_dn fails with search_ext()
- Fix unable to add objectclass/attribute without x-origin
- Fix execute dsconf to open pdb</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-2" date="1698408000">- Fix dn2rdn -v error</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-3" date="1698926400">- Fix dirsrv-snmp.service start fail</changelog>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 1.4.3.36-4" date="1707048000">- Add requires 389-ds-base-legacy-tools</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-5" date="1707134400">- Fix CVE-2024-1062</changelog>
</package>
<package pkgid="a94d69025435871320e8925baed080f08fa0de80ae0b628812e29399e90746c2" name="389-ds-base" arch="src">
  <version epoch="0" ver="1.4.3.36" rel="6.oe2203sp1"/>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1.4.3.20-2" date="1691409600">- add support for sw_64 and loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-1" date="1698148800">- Update to 1.4.3.36
- Fix dsidm user/posixgroup get_dn fails with search_ext()
- Fix unable to add objectclass/attribute without x-origin
- Fix execute dsconf to open pdb</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-2" date="1698408000">- Fix dn2rdn -v error</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-3" date="1698926400">- Fix dirsrv-snmp.service start fail</changelog>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 1.4.3.36-4" date="1707048000">- Add requires 389-ds-base-legacy-tools</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-5" date="1707134400">- Fix CVE-2024-1062</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-6" date="1717588800">- Fix CVE-2024-2199 and CVE-2024-3657</changelog>
</package>
<package pkgid="96238044c356effa326556058ef7b6d4c8cce3534af2e0348957033d1edd8b17" name="389-ds-base" arch="src">
  <version epoch="0" ver="1.4.3.36" rel="7.oe2203sp1"/>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1.4.3.20-2" date="1691409600">- add support for sw_64 and loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-1" date="1698148800">- Update to 1.4.3.36
- Fix dsidm user/posixgroup get_dn fails with search_ext()
- Fix unable to add objectclass/attribute without x-origin
- Fix execute dsconf to open pdb</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-2" date="1698408000">- Fix dn2rdn -v error</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-3" date="1698926400">- Fix dirsrv-snmp.service start fail</changelog>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 1.4.3.36-4" date="1707048000">- Add requires 389-ds-base-legacy-tools</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-5" date="1707134400">- Fix CVE-2024-1062</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-6" date="1717588800">- Fix CVE-2024-2199 and CVE-2024-3657</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-7" date="1726142400">- Fix CVE-2022-1949,CVE-2024-5953</changelog>
</package>
<package pkgid="2c966b823e9e34176d94ee9126d87b4798a45448a4d892560e07fa99e22189db" name="GraphicsMagick" arch="src">
  <version epoch="0" ver="1.3.41" rel="1.oe2203sp1"/>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 1.3.30-9" date="1657540800">- Fix CVE-2022-1270</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.3.41-1" date="1694606400">- Update to 1.3.41 for fix CVE-2020-21679</changelog>
</package>
<package pkgid="f77b46268c88b7ad63c844cb2178d844516afe0e7d1c9cbeeec0a0f9256becc0" name="ImageMagick" arch="src">
  <version epoch="1" ver="7.1.0.28" rel="6.oe2203sp1"/>
  <changelog author="wulei &lt;wulei80@huawei.com&gt; - 7.1.0.0-1" date="1640952000">- Package update</changelog>
  <changelog author="xu_ping &lt;xuping33@huawei.com&gt; - 7.1.0.0-2" date="1645272000">- Add requires open-sans-fonts to fix unable to read font `helvetica`</changelog>
  <changelog author="xu_ping &lt;xuping33@huawei.com&gt; - 7.1.0.0-3" date="1645617600">- OpenEXR upgrade abandoned ilmbase-devel,reference Imath-devel instead</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 7.1.0.27-1" date="1646913600">- Update to 7.1.0.27 for fix CVE-2021-39212 CVE-2021-3596</changelog>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 7.1.0.28-1" date="1652443200">- Upgrade to 7.1.0.28 for fix CVE-2022-1114</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-2" date="1660132800">- fix CVE-2022-2719</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-3" date="1660910400">- fix CVE-2022-1115</changelog>
  <changelog author="chenwenjie &lt;chenwenjie@ncti-gba.cn&gt; - 1:7.1.0.28-4" date="1665662400">- fix CVE-2022-3213</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-5" date="1669118400">- Fix CVE-2022-32547</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-6" date="1675944000">- Fix CVE-2022-44267 and CVE-2022-44268</changelog>
</package>
<package pkgid="72e407cd3022b45ca92f9021cb2d24fbf3a1125aa344aed69245b0dd6311337f" name="ImageMagick" arch="src">
  <version epoch="1" ver="7.1.1.8" rel="1.oe2203sp1"/>
  <changelog author="xu_ping &lt;xuping33@huawei.com&gt; - 7.1.0.0-2" date="1645272000">- Add requires open-sans-fonts to fix unable to read font `helvetica`</changelog>
  <changelog author="xu_ping &lt;xuping33@huawei.com&gt; - 7.1.0.0-3" date="1645617600">- OpenEXR upgrade abandoned ilmbase-devel,reference Imath-devel instead</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 7.1.0.27-1" date="1646913600">- Update to 7.1.0.27 for fix CVE-2021-39212 CVE-2021-3596</changelog>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 7.1.0.28-1" date="1652443200">- Upgrade to 7.1.0.28 for fix CVE-2022-1114</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-2" date="1660132800">- fix CVE-2022-2719</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-3" date="1660910400">- fix CVE-2022-1115</changelog>
  <changelog author="chenwenjie &lt;chenwenjie@ncti-gba.cn&gt; - 1:7.1.0.28-4" date="1665662400">- fix CVE-2022-3213</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-5" date="1669118400">- Fix CVE-2022-32547</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-6" date="1675944000">- Fix CVE-2022-44267 and CVE-2022-44268</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-1" date="1682337600">- Update to 7.1.1.8 for Fix CVE-2023-1289,CVE-2023-1906</changelog>
</package>
<package pkgid="b6612c4617c20895bcd2969406b5273b9cfa4cb1ebf7fce145472102f9a0a7cf" name="ImageMagick" arch="src">
  <version epoch="1" ver="7.1.1.8" rel="2.oe2203sp1"/>
  <changelog author="xu_ping &lt;xuping33@huawei.com&gt; - 7.1.0.0-3" date="1645617600">- OpenEXR upgrade abandoned ilmbase-devel,reference Imath-devel instead</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 7.1.0.27-1" date="1646913600">- Update to 7.1.0.27 for fix CVE-2021-39212 CVE-2021-3596</changelog>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 7.1.0.28-1" date="1652443200">- Upgrade to 7.1.0.28 for fix CVE-2022-1114</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-2" date="1660132800">- fix CVE-2022-2719</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-3" date="1660910400">- fix CVE-2022-1115</changelog>
  <changelog author="chenwenjie &lt;chenwenjie@ncti-gba.cn&gt; - 1:7.1.0.28-4" date="1665662400">- fix CVE-2022-3213</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-5" date="1669118400">- Fix CVE-2022-32547</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-6" date="1675944000">- Fix CVE-2022-44267 and CVE-2022-44268</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-1" date="1682337600">- Update to 7.1.1.8 for Fix CVE-2023-1289,CVE-2023-1906</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-2" date="1686225600">- Fix CVE-2023-34151 and CVE-2023-34153</changelog>
</package>
<package pkgid="cd40b7adfca31c165caf05aeae6dd24dd7b99bd54d0a4ed65c83250aa532c654" name="ImageMagick" arch="src">
  <version epoch="1" ver="7.1.1.8" rel="3.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 7.1.0.27-1" date="1646913600">- Update to 7.1.0.27 for fix CVE-2021-39212 CVE-2021-3596</changelog>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 7.1.0.28-1" date="1652443200">- Upgrade to 7.1.0.28 for fix CVE-2022-1114</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-2" date="1660132800">- fix CVE-2022-2719</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-3" date="1660910400">- fix CVE-2022-1115</changelog>
  <changelog author="chenwenjie &lt;chenwenjie@ncti-gba.cn&gt; - 1:7.1.0.28-4" date="1665662400">- fix CVE-2022-3213</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-5" date="1669118400">- Fix CVE-2022-32547</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-6" date="1675944000">- Fix CVE-2022-44267 and CVE-2022-44268</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-1" date="1682337600">- Update to 7.1.1.8 for Fix CVE-2023-1289,CVE-2023-1906</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-2" date="1686225600">- Fix CVE-2023-34151 and CVE-2023-34153</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-3" date="1688040000">- Fix CVE-2023-34474 and CVE-2023-34475</changelog>
</package>
<package pkgid="dff61de010cca6eb0797ad10c0a6d6b1925cd68919717667ae5e9882ba7964ae" name="ImageMagick" arch="src">
  <version epoch="1" ver="7.1.1.8" rel="4.oe2203sp1"/>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 7.1.0.28-1" date="1652443200">- Upgrade to 7.1.0.28 for fix CVE-2022-1114</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-2" date="1660132800">- fix CVE-2022-2719</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-3" date="1660910400">- fix CVE-2022-1115</changelog>
  <changelog author="chenwenjie &lt;chenwenjie@ncti-gba.cn&gt; - 1:7.1.0.28-4" date="1665662400">- fix CVE-2022-3213</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-5" date="1669118400">- Fix CVE-2022-32547</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-6" date="1675944000">- Fix CVE-2022-44267 and CVE-2022-44268</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-1" date="1682337600">- Update to 7.1.1.8 for Fix CVE-2023-1289,CVE-2023-1906</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-2" date="1686225600">- Fix CVE-2023-34151 and CVE-2023-34153</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-3" date="1688040000">- Fix CVE-2023-34474 and CVE-2023-34475</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-4" date="1690200000">- Fix CVE-2023-3428</changelog>
</package>
<package pkgid="98e11e844b79a234feb2d108b5af9d8ab36d8a2902181ff11bfefec7a4493d07" name="ImageMagick" arch="src">
  <version epoch="1" ver="7.1.1.8" rel="5.oe2203sp1"/>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-2" date="1660132800">- fix CVE-2022-2719</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-3" date="1660910400">- fix CVE-2022-1115</changelog>
  <changelog author="chenwenjie &lt;chenwenjie@ncti-gba.cn&gt; - 1:7.1.0.28-4" date="1665662400">- fix CVE-2022-3213</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-5" date="1669118400">- Fix CVE-2022-32547</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-6" date="1675944000">- Fix CVE-2022-44267 and CVE-2022-44268</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-1" date="1682337600">- Update to 7.1.1.8 for Fix CVE-2023-1289,CVE-2023-1906</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-2" date="1686225600">- Fix CVE-2023-34151 and CVE-2023-34153</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-3" date="1688040000">- Fix CVE-2023-34474 and CVE-2023-34475</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-4" date="1690200000">- Fix CVE-2023-3428</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 1:7.1.1.8-5" date="1696680000">- Fix CVE-2023-5341</changelog>
</package>
<package pkgid="98af61e1e441532807c7d428bb36c5a8eab95187d2de58e734f152b4024889c2" name="LibRaw" arch="src">
  <version epoch="0" ver="0.20.2" rel="6.oe2203sp1"/>
  <changelog author="zhangjiapeng &lt;zhangjiapeng9@huawei.com&gt; - 0.20.2-4" date="1622721600">- fix use of uninitialized value</changelog>
  <changelog author="xu_ping &lt;xuping33@huawei.com&gt; - 0.20.2-5" date="1645790400">- fix use of uninitialized value of makernotes.cpp and misc_parsers.cpp</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 0.20.2-6" date="1684152000">- Fix CVE-2023-1729</changelog>
</package>
<package pkgid="250254b0ee2918a91783a4f4e53836e13402f5ff71b3928c7694894fb4dc03b1" name="LibRaw" arch="src">
  <version epoch="0" ver="0.20.2" rel="7.oe2203sp1"/>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 0.20.2-6" date="1684152000">- Fix CVE-2023-1729</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 0.20.2-7" date="1711454400">- Fix CVE-2021-32142</changelog>
</package>
<package pkgid="7f10c255cbdf7a72eaecc92878aad100d149e9f2df085b655a7ff751790444b5" name="NetworkManager" arch="src">
  <version epoch="1" ver="1.32.12" rel="18.oe2203sp1"/>
  <changelog author="gaoxingwang &lt;gaoxingwang@huawei.com&gt; - 1.32.12-8" date="1647259200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:recover to 30s timeout in NetworkManager-wait-online service</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1.32.12-9" date="1657713600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix remove NetworkManager wrongly when yum remove NetworkManager-bluetooth subpackage that is not installed</changelog>
  <changelog author="Aichun Li &lt;liaichun@huawei.com&gt; - 1.32.12-10" date="1659096000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:libnm:fix warning when setting wrong ethtool ternary value
core: reload config for active devices
libnm: fix crash on failure of nm_vpn_plugin_info_new_from_file()
libnm: fix crash in _nm_ip_route_validate_all for invalid-route</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-11" date="1664452800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete extra so file in main packet</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-12" date="1664452801">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:use multi-thread build</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 1:1.32.12-13" date="1666612800">- Type:feature
- CVE:NA
- SUG:NA
- DESC:Add sw64 architecture</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 1:1.32.12-14" date="1670328000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Set NMTST_FORCE_REAL_ROOT to true to skip test which need root user permission</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-15" date="1685966400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: split team into subpackage</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-17" date="1685966401">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:merge ovs into main package

 Mon Jun 5 2023 gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-16
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add macro firewalld_zone to fix firewalld error about nm-shared.xml</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-18" date="1686312000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix mismatch when uninstall team subpackage</changelog>
</package>
<package pkgid="2b1acb3fb27d4e5f64a0efdbf3e734b7e5778b4cf91460db7f9a03a30c6e6081" name="NetworkManager" arch="src">
  <version epoch="1" ver="1.32.12" rel="19.oe2203sp1"/>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1.32.12-9" date="1657713600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix remove NetworkManager wrongly when yum remove NetworkManager-bluetooth subpackage that is not installed</changelog>
  <changelog author="Aichun Li &lt;liaichun@huawei.com&gt; - 1.32.12-10" date="1659096000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:libnm:fix warning when setting wrong ethtool ternary value
core: reload config for active devices
libnm: fix crash on failure of nm_vpn_plugin_info_new_from_file()
libnm: fix crash in _nm_ip_route_validate_all for invalid-route</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-11" date="1664452800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete extra so file in main packet</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-12" date="1664452801">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:use multi-thread build</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 1:1.32.12-13" date="1666612800">- Type:feature
- CVE:NA
- SUG:NA
- DESC:Add sw64 architecture</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 1:1.32.12-14" date="1670328000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Set NMTST_FORCE_REAL_ROOT to true to skip test which need root user permission</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-15" date="1685966400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: split team into subpackage</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-17" date="1685966401">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:merge ovs into main package

 Mon Jun 5 2023 gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-16
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add macro firewalld_zone to fix firewalld error about nm-shared.xml</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-18" date="1686312000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix mismatch when uninstall team subpackage</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-19" date="1686657600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:mv nm-pppd-plugin.so to ppp subpackage</changelog>
</package>
<package pkgid="e192e2b0c894eefc91d648e3d6f58f56b25fd515dcf1f1f24ce5aa5211b52c3c" name="NetworkManager" arch="src">
  <version epoch="1" ver="1.32.12" rel="20.oe2203sp1"/>
  <changelog author="Aichun Li &lt;liaichun@huawei.com&gt; - 1.32.12-10" date="1659096000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:libnm:fix warning when setting wrong ethtool ternary value
core: reload config for active devices
libnm: fix crash on failure of nm_vpn_plugin_info_new_from_file()
libnm: fix crash in _nm_ip_route_validate_all for invalid-route</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-11" date="1664452800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete extra so file in main packet</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-12" date="1664452801">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:use multi-thread build</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 1:1.32.12-13" date="1666612800">- Type:feature
- CVE:NA
- SUG:NA
- DESC:Add sw64 architecture</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 1:1.32.12-14" date="1670328000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Set NMTST_FORCE_REAL_ROOT to true to skip test which need root user permission</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-15" date="1685966400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: split team into subpackage</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-17" date="1685966401">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:merge ovs into main package

 Mon Jun 5 2023 gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-16
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add macro firewalld_zone to fix firewalld error about nm-shared.xml</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-18" date="1686312000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix mismatch when uninstall team subpackage</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-19" date="1686657600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:mv nm-pppd-plugin.so to ppp subpackage</changelog>
  <changelog author="sunsuwan&lt;sunsuwan3@huawei.com&gt; - 1:1.32.12-20" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:delete lease file when connection deleted</changelog>
</package>
<package pkgid="1c600237b21af6959f3d56eaa044d5b5e9af76a8dad544de65f800a506793bc4" name="OpenEXR" arch="src">
  <version epoch="0" ver="3.1.5" rel="2.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 3.1.5-1" date="1651060800">- update to 3.1.5 for fix CVE-2021-45942</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.1.5-2" date="1708948800">- Fix CVE-2023-5841</changelog>
</package>
<package pkgid="e2f7b1b573541eeb3e4f7527d76815b9b20119d166818c20888d6e06ca75147d" name="OpenEXR" arch="src">
  <version epoch="0" ver="3.1.5" rel="3.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 3.1.5-1" date="1651060800">- update to 3.1.5 for fix CVE-2021-45942</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.1.5-2" date="1708948800">- Fix CVE-2023-5841</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.1.5-3" date="1713355200">- Fix CVE-2024-31047</changelog>
</package>
<package pkgid="71b87db49af7e2b4d8add042d2aa98309192aeea18d7541a413a62fcd20ded69" name="SDL2" arch="src">
  <version epoch="0" ver="2.0.12" rel="5.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@huawei.com&gt; - 2.0.12-2" date="1641643200">- Fix build against wayland</changelog>
  <changelog author="yuanxin &lt;yuanxin24@h-partners.com&gt; - 2.0.12-3" date="1647345600">- Type:CVE
- ID:NA
- SUG:NA
- DESC:Fix CVE-2021-33657</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 2.0.12-4" date="1649678400">- Fix CVE-2020-14409 CVE-2020-14410</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 2.0.12-5" date="1673352000">- fix CVE-2022-4743</changelog>
</package>
<package pkgid="20f58d13bddda9fd73f660c2b30df60d2c88b9e15f05ec39160920c2ff2682d1" name="abseil-cpp" arch="src">
  <version epoch="0" ver="20220623.1" rel="5.oe2203sp1"/>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 20220623.1-1" date="1667390400">- Type:enhancement
- ID:NA
- SUG:NA
- DESC: update to 20220623.1</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 20220623.1-2" date="1668168000">- Type:feature
- CVE:NA
- SUG:NA
- DESC:Add sw64 architecture</changelog>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 20220623.1-3" date="1668427200">- add loongarch support for abseil-cpp</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 20220623.1-5" date="1713268800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Add missing include for std::unique_ptr</changelog>
</package>
<package pkgid="b3d28f62c0c9198f218a41d77ef655499c3643bf688891a8b102d40473d0645a" name="adwaita-qt" arch="src">
  <version epoch="0" ver="1.1.0" rel="7.oe2203sp1"/>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 1.1.0-7" date="1688731200">- Modify changelog release version</changelog>
</package>
<package pkgid="aa519d672325d12150d471f9460e4edc86d357edda1bef149c31e36957edccf0" name="amanda" arch="src">
  <version epoch="0" ver="3.5.1" rel="23.oe2203sp1"/>
  <changelog author="Haiwei Li &lt;lihaiwei8@huawei.com&gt; - 3.5.1-19" date="1627646400">- Fix multiple definition tu_debugging_enabled</changelog>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt; - 3.5.1-20" date="1655726400">- Skip hexencode test case as it fails with new glib2</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 3.5.1-21" date="1668168000">- fix hexencode test failed</changelog>
  <changelog author="luopihui &lt;luopihui@ncti-gba.cn&gt; - 3.5.1-22" date="1677585600">- Fix CVE-2022-37704 CVE-2022-37705</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 3.5.1-23" date="1677758400">- Add install require sharutils</changelog>
</package>
<package pkgid="75cee46e9b1f2ddd4f0992b3597b0d84b3c6450d07899ffae777b133b648b156" name="amanda" arch="src">
  <version epoch="0" ver="3.5.4" rel="1.oe2203sp1"/>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt; - 3.5.1-20" date="1655726400">- Skip hexencode test case as it fails with new glib2</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 3.5.1-21" date="1668168000">- fix hexencode test failed</changelog>
  <changelog author="luopihui &lt;luopihui@ncti-gba.cn&gt; - 3.5.1-22" date="1677585600">- Fix CVE-2022-37704 CVE-2022-37705</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 3.5.1-23" date="1677758400">- Add install require sharutils</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.5.4-1" date="1691496000">- Update to version 3.5.4 for fix CVE-2023-30577</changelog>
</package>
<package pkgid="1936bf948e151167dc0143dfe63b5c5c4799595da1b65a908651c0e10a2787a8" name="anaconda" arch="src">
  <version epoch="0" ver="36.16.5" rel="13.oe2203sp1"/>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-4" date="1669032000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:open disk encryption on openEuler</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-5" date="1669204800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:pxe kickstart version with local pykickstart
       and with build save patch by source4</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-6" date="1669291200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add logo with install
       the kickstart version change to patch</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-7" date="1669723200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:change product name not with upper
       add SM3 with tui</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-8" date="1670673600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:ignore detect enable smt
       open swap in storage</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-9" date="1671019200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:adapt active connection without interface name</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-10" date="1671105600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix conf of storage</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 36.16.5-11" date="1671537600">- Type:feature
- ID:NA
- SUG:NA
- DESC:cgroup files is a additional enhanced cgroup feature, which will
       limit cgroup opened files, add cgroup_disable=files to
       default cmdline to disable this feature to keep cgroup's default behavior.</changelog>
  <changelog author="fengtao &lt;fengtao40@huawei.com&gt; - 36.16.5-12" date="1672056000">- Type:feature
- ID:NA
- SUG:NA
- DESC: add loongarch and sw support patch in SP1</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 36.16.5-13" date="1672142400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: Change patch sequence.</changelog>
</package>
<package pkgid="2136d2b40b15e291bfc0b3acd8d7e428c6e6fb791dac18b9e90359554428dae7" name="anaconda" arch="src">
  <version epoch="0" ver="36.16.5" rel="14.oe2203sp1"/>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-5" date="1669204800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:pxe kickstart version with local pykickstart
       and with build save patch by source4</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-6" date="1669291200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add logo with install
       the kickstart version change to patch</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-7" date="1669723200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:change product name not with upper
       add SM3 with tui</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-8" date="1670673600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:ignore detect enable smt
       open swap in storage</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-9" date="1671019200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:adapt active connection without interface name</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-10" date="1671105600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix conf of storage</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 36.16.5-11" date="1671537600">- Type:feature
- ID:NA
- SUG:NA
- DESC:cgroup files is a additional enhanced cgroup feature, which will
       limit cgroup opened files, add cgroup_disable=files to
       default cmdline to disable this feature to keep cgroup's default behavior.</changelog>
  <changelog author="fengtao &lt;fengtao40@huawei.com&gt; - 36.16.5-12" date="1672056000">- Type:feature
- ID:NA
- SUG:NA
- DESC: add loongarch and sw support patch in SP1</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 36.16.5-13" date="1672142400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: Change patch sequence.</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-14" date="1677240000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: backport password tooltip text adapt language
        close disk encryption</changelog>
</package>
<package pkgid="7ce5d6cc0c314a38c6afe51b2db801bf1f42aaf7b7dbcdabfacee34ff20b4cc0" name="ansible" arch="src">
  <version epoch="0" ver="2.9.27" rel="4.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 2.9.27-1" date="1646136000">- Hostname module support openEuler</changelog>
  <changelog author="huangtianhua &lt;huangtianhua@huawei.com&gt; - 2.9.27-2" date="1647604800">- Remove require python-keyczar and modify require crypto to cryptography</changelog>
  <changelog author="liyanan &lt;thistleslyn@163.com&gt; - 2.9.27-3" date="1681905600">- Remove with_python3 macros and python3-nose buildRequire</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2.9.27-4" date="1707134400">- Fix CVE-2024-0690</changelog>
</package>
<package pkgid="25c0957497de7c06bc62f9891bc403d41b20fab848a567fbfc46f925bef8165b" name="apache-commons-fileupload" arch="src">
  <version epoch="0" ver="1.4" rel="2.oe2203sp1"/>
  <changelog author="liyuxiang&lt;liyuxiang@ncti-gba.cn&gt; - 1.4-2" date="1678104000">- fix CVE-2023-24998</changelog>
</package>
<package pkgid="30c9acffc7dfa4768bffb12c5eae0a471527d2d13ef55e64cfd0c6b2fbd038ce" name="apache-commons-net" arch="src">
  <version epoch="0" ver="3.6" rel="7.oe2203sp1"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.6-6" date="1685966400">- Remove TestConnectTimeout for ftp</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.6-7" date="1700740800">- Fix CVE-2021-37533</changelog>
</package>
<package pkgid="583efb7e4af2b692f16e1e0d37b1026094a8874eb2e02352596997a045cf80a2" name="apache-mime4j" arch="src">
  <version epoch="0" ver="0.8.3" rel="2.oe2203sp1"/>
  <changelog author="SimpleUpdate Robot &lt;tc@openeuler.org&gt; - 0.8.3-1" date="1655208000">- Upgrade to version 0.8.3</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 0.8.3-2" date="1709208000">- Fix CVE-2024-21742</changelog>
</package>
<package pkgid="4cb32a2596c0ae7f4c1cda8dbd0927862ee43f33b4959b9bf5404a2d01c36d7c" name="apache-sshd" arch="src">
  <version epoch="1" ver="2.9.2" rel="2.oe2203sp1"/>
  <changelog author="liangqifeng &lt;liangqifeng@ncti-gba.cn&gt; - 1:2.9.2-1" date="1669032000">- Fix CVE-2022-45047</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1:2.9.2-2" date="1704974400">- Fix CVE-2023-35887</changelog>
</package>
<package pkgid="222c744b1c489a9114e3ecba771a8e48accb0cd798f1077ed06c3243dd0a1452" name="apache-sshd" arch="src">
  <version epoch="1" ver="2.9.2" rel="3.oe2203sp1"/>
  <changelog author="liangqifeng &lt;liangqifeng@ncti-gba.cn&gt; - 1:2.9.2-1" date="1669032000">- Fix CVE-2022-45047</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1:2.9.2-2" date="1704974400">- Fix CVE-2023-35887</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:2.9.2-3" date="1705924800">- Fix CVE-2023-48795</changelog>
</package>
<package pkgid="9f0e2365b7ae552c8ab38344f79afc6783b5a1bdf68ac2a7b37a509165fe3c4a" name="apr" arch="src">
  <version epoch="0" ver="1.7.0" rel="6.oe2203sp1"/>
  <changelog author="yangzhuangzhuang&lt;yangzhuangzhuang1@huawei.com&gt; - 1.7.0-2" date="1616155200">- Type: CVE
- ID: CVE-2017-12613
- SUG: NA
- DESC:Fix CVE-2017-12613</changelog>
  <changelog author="shenyangyang&lt;shenyangyang4@huawei.com&gt; - 1.7.0-3" date="1617105600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Rebuild for openEuler-rpm-config moving /usr/lib/rpm/openEuler/xxxx
       to /usr/lib/xxxx</changelog>
  <changelog author="yangzhuangzhuang&lt;yangzhuangzhuang1@huawei.com&gt; - 1.7.0-4" date="1639742400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Fix the compilation failure when autoconf-2.71 is used</changelog>
  <changelog author="yixiangzhike&lt;yixiangzhike007@163.com&gt; - 1.7.0-5" date="1666612800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:use the macro make_build instead of make in build</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 1.7.0-6" date="1676289600">- Type:CVE
- ID:CVE-2022-24963
- SUG:NA
- DESC:Fix CVE-2022-24963</changelog>
</package>
<package pkgid="f4adfd17691efce33f1d015a4e1292a6995fe2f3ffb1386fc7e98cf0d8b694db" name="apr-util" arch="src">
  <version epoch="0" ver="1.6.1" rel="14.oe2203sp1"/>
  <changelog author="panxiaohe &lt;panxiaohe@huawei.com&gt; - 1.6.1-12" date="1624104000">- BuildRequires: replace libdb with gdbm
- Add requires gdbm-devel</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 1.6.1-13" date="1659009600">- add sw64 patch</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 1.6.1-14" date="1676376000">- Fix CVE-2022-25147</changelog>
</package>
<package pkgid="b4996fb30206f551e4d78b99cbe6b3677267fb4459c8cadf33651f5bc7fd7e66" name="arm-trusted-firmware" arch="src">
  <version epoch="0" ver="2.3" rel="3.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; -2.3-2" date="1670414400">- Add RELRO,PIE,BIND_NOW flags and fix not striped problem</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.3-3" date="1701432000">- Fix CVE-2022-47630</changelog>
</package>
<package pkgid="ecb0a681ce32e3cd696d16eee46f192c3db42783e7fbeabb9f44c5ecb2641fbc" name="arm-trusted-firmware" arch="src">
  <version epoch="0" ver="2.3" rel="4.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; -2.3-2" date="1670414400">- Add RELRO,PIE,BIND_NOW flags and fix not striped problem</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.3-3" date="1701432000">- Fix CVE-2022-47630</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.3-4" date="1706011200">- Fix CVE-2023-49100</changelog>
</package>
<package pkgid="e8037c6bb65624ff6c56fa6386b5b72dab4657fcb4c2947b0fdbbf6855d38708" name="arm-trusted-firmware" arch="src">
  <version epoch="0" ver="2.3" rel="5.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; -2.3-2" date="1670414400">- Add RELRO,PIE,BIND_NOW flags and fix not striped problem</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.3-3" date="1701432000">- Fix CVE-2022-47630</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.3-4" date="1706011200">- Fix CVE-2023-49100</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 2.3-5" date="1720526400">- Fix CVE-2024-6563 CVE-2024-6564</changelog>
</package>
<package pkgid="211f59173887e5b4faeec3a8056ee0aecacc94f513c83cb826c7a2fbacab92e2" name="aspell" arch="src">
  <version epoch="12" ver="0.60.6.1" rel="30.oe2203sp1"/>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 12:0.60.6.1-29" date="1659009600">- add sw64 patch</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 12:0.60.6.1-30" date="1710763200">- Fix CVE-2019-25051</changelog>
</package>
<package pkgid="79c568d4b0ca79352a2743988d42c946deca69535248b6564b1f13da28b40ba1" name="assimp" arch="src">
  <version epoch="0" ver="5.2.4" rel="2.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 5.2.4-1" date="1666008000">- Upgrade to 5.2.4</changelog>
  <changelog author="yinyongkang &lt;yinyongkang@kylinos.cn&gt; - 5.2.4-2" date="1721649600">- fix CVE-2024-40724</changelog>
</package>
<package pkgid="e8e73d9fc1bc24f6f72d53c4cc0b1be007a0090344327dd6e993ef267907fc5e" name="assimp" arch="src">
  <version epoch="0" ver="5.2.4" rel="3.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 5.2.4-1" date="1666008000">- Upgrade to 5.2.4</changelog>
  <changelog author="yinyongkang &lt;yinyongkang@kylinos.cn&gt; - 5.2.4-2" date="1721649600">- fix CVE-2024-40724</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.2.4-3" date="1726747200">- fix CVE-2024-45679</changelog>
</package>
<package pkgid="741dfa0311a641b7c119c3729aa43b87f9c7f7c05f86043c542eb47c64efc1ac" name="at" arch="src">
  <version epoch="0" ver="3.2.2" rel="4.oe2203sp1"/>
  <changelog author="yangzhuangzhuang&lt;yangzhuangzhuang1@huawei.com&gt; - 3.2.2-1" date="1639224000">- Type:update
- ID:NA
- SUG:NA
- DESC:update version to 3.2.2</changelog>
  <changelog author="yanglongkang&lt;yanglongkang@h-partners.com&gt; - 3.2.2-2" date="1666440000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Adding Patching Operations
       provides relibility and self-heading capabilities for service</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 3.2.2-3" date="1669204800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Modify Source0</changelog>
  <changelog author="zhoupengcheng &lt;zhoupengcheng11@huawei.com&gt; - 3.2.2-4" date="1686312000">- Type:bugfix
- CVE:
- SUG:NA
- DESC:provides reliability and self-healing capabilities for service</changelog>
</package>
<package pkgid="8ac539429a2579ad15c066526be6fbf9e9f2781d5437af7323dcab48912383a1" name="atune" arch="src">
  <version epoch="0" ver="1.0.0" rel="12.oe2203sp1"/>
  <changelog author="gaoruoshu &lt;gaoruoshu@huawei.com&gt; - 1.0.0-3" date="1646308800">- fix start failed of atuned service</changelog>
  <changelog author="Bin Hu &lt;hubin73@huawei.com&gt; - 1.0.0-4" date="1646395200">- change Makefile A-Tune version to 1.0.0</changelog>
  <changelog author="panxiaohe &lt;pan_xiaohe@hoperun.com&gt; - 1.0.0-5" date="1674907200">- fix build failure that unitdir cannot be identified</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 1.0.0-6" date="1677844800">- Add sw64 architecture</changelog>
  <changelog author="yuxiangyang &lt;yuxiangyang4@xfusion.com&gt; - 1.0.0-7" date="1682078400">- fix atune-engine process remaining after remove atune-engine.rpm</changelog>
  <changelog author="gaoruoshu &lt;gaoruoshu@huawei.com&gt; - 1.0.0-8" date="1691668800">- bugfix set collection/transfer/train dir to specific dir</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1.0.0-9" date="1691755200">- add support for loongarch64</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1.0.0-10" date="1691755201">- update sw_64 support patch</changelog>
  <changelog author="gaoruoshu &lt;gaoruoshu@huawei.com&gt; - 1.0.0-11" date="1692187200">- atune add service restart mode</changelog>
  <changelog author="gaoruoshu &lt;gaoruoshu@huawei.com&gt; - 1.0.0-12" date="1692187201">- atune update Makefile and logs</changelog>
</package>
<package pkgid="6894ba0fbf7a145c752a35e843d03114b3228319b2705c52e9f8ee4b5e8f510b" name="atune" arch="src">
  <version epoch="0" ver="1.0.0" rel="14.oe2203sp1"/>
  <changelog author="panxiaohe &lt;pan_xiaohe@hoperun.com&gt; - 1.0.0-5" date="1674907200">- fix build failure that unitdir cannot be identified</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 1.0.0-6" date="1677844800">- Add sw64 architecture</changelog>
  <changelog author="yuxiangyang &lt;yuxiangyang4@xfusion.com&gt; - 1.0.0-7" date="1682078400">- fix atune-engine process remaining after remove atune-engine.rpm</changelog>
  <changelog author="gaoruoshu &lt;gaoruoshu@huawei.com&gt; - 1.0.0-8" date="1691668800">- bugfix set collection/transfer/train dir to specific dir</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1.0.0-9" date="1691755200">- add support for loongarch64</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1.0.0-10" date="1691755201">- update sw_64 support patch</changelog>
  <changelog author="gaoruoshu &lt;gaoruoshu@huawei.com&gt; - 1.0.0-11" date="1692187200">- atune add service restart mode</changelog>
  <changelog author="gaoruoshu &lt;gaoruoshu@huawei.com&gt; - 1.0.0-12" date="1692187201">- atune update Makefile and logs</changelog>
  <changelog author="zhoupengcheng &lt;zhoupengcheng11@huawei.com&gt; - 1.0.0-13" date="1699444800">- define-fix-privilege-escalation</changelog>
  <changelog author="zhoupengcheng &lt;zhoupengcheng11@huawei.com&gt; - 1.0.0-14" date="1699444801">- fix-collection-train-file-overwriting-through-soft-links</changelog>
</package>
<package pkgid="c4b3f064732a4379dfd1cfeed951670bddabc8f78a69afdbb0b06378669d32c5" name="atune-collector" arch="src">
  <version epoch="0" ver="1.1.0" rel="3.oe2203sp1"/>
  <changelog author="hanxinke &lt;hanxinke@huawei.com&gt; - 1.1.0-1" date="1636632000">- upgrade to v1.1.0</changelog>
  <changelog author="zhangjian &lt;zhang_jian7@hoperun.com&gt; - 1.1.0-2" date="1678363200">- fix bug: list index out of range in virtualbox</changelog>
  <changelog author="gaoruoshu &lt;gaoruoshu@huawei.com&gt; - 1.1.0-3" date="1690891200">- feature: enable application config</changelog>
</package>
<package pkgid="fab8841ed773cfc51dbfbd5c9d24f188649e9d048f61dff2a4f7a02f9c2365ef" name="atune-collector" arch="src">
  <version epoch="0" ver="1.1.0" rel="4.oe2203sp1"/>
  <changelog author="hanxinke &lt;hanxinke@huawei.com&gt; - 1.1.0-1" date="1636632000">- upgrade to v1.1.0</changelog>
  <changelog author="zhangjian &lt;zhang_jian7@hoperun.com&gt; - 1.1.0-2" date="1678363200">- fix bug: list index out of range in virtualbox</changelog>
  <changelog author="gaoruoshu &lt;gaoruoshu@huawei.com&gt; - 1.1.0-3" date="1690891200">- feature: enable application config</changelog>
  <changelog author="gaoruoshu &lt;gaoruoshu@huawei.com&gt; - 1.1.0-4" date="1692187200">- atune-collector: add backup for apps</changelog>
</package>
<package pkgid="997491c9555c8e622e40594253bd644aaa4403f7c6c4dda13e68c81dc3c6108a" name="atune-collector" arch="src">
  <version epoch="0" ver="1.1.0" rel="5.oe2203sp1"/>
  <changelog author="hanxinke &lt;hanxinke@huawei.com&gt; - 1.1.0-1" date="1636632000">- upgrade to v1.1.0</changelog>
  <changelog author="zhangjian &lt;zhang_jian7@hoperun.com&gt; - 1.1.0-2" date="1678363200">- fix bug: list index out of range in virtualbox</changelog>
  <changelog author="gaoruoshu &lt;gaoruoshu@huawei.com&gt; - 1.1.0-3" date="1690891200">- feature: enable application config</changelog>
  <changelog author="gaoruoshu &lt;gaoruoshu@huawei.com&gt; - 1.1.0-4" date="1692187200">- atune-collector: add backup for apps</changelog>
  <changelog author="gaoruoshu &lt;gaoruoshu@huawei.com&gt; - 1.1.0-5" date="1692705600">- feature: add [network] to CPI</changelog>
</package>
<package pkgid="024497f8cb47c905d024ac097955e1a9531fa621717eca5ef73f58e348aea353" name="atune-collector" arch="src">
  <version epoch="0" ver="1.1.0" rel="6.oe2203sp1"/>
  <changelog author="zhangjian &lt;zhang_jian7@hoperun.com&gt; - 1.1.0-2" date="1678363200">- fix bug: list index out of range in virtualbox</changelog>
  <changelog author="gaoruoshu &lt;gaoruoshu@huawei.com&gt; - 1.1.0-3" date="1690891200">- feature: enable application config</changelog>
  <changelog author="gaoruoshu &lt;gaoruoshu@huawei.com&gt; - 1.1.0-4" date="1692187200">- atune-collector: add backup for apps</changelog>
  <changelog author="gaoruoshu &lt;gaoruoshu@huawei.com&gt; - 1.1.0-5" date="1692705600">- feature: add [network] to CPI</changelog>
  <changelog author="gaoruoshu &lt;gaoruoshu@huawei.com&gt; - 1.1.0-6" date="1701259200">- feature: add rfs and rps/xps=multi to [network]</changelog>
</package>
<package pkgid="40251714d525ce06819275b9bfccc219982033e9d2b3bd9d6de79538e52668d7" name="atune-collector" arch="src">
  <version epoch="0" ver="1.1.0" rel="8.oe2203sp1"/>
  <changelog author="zhangjian &lt;zhang_jian7@hoperun.com&gt; - 1.1.0-2" date="1678363200">- fix bug: list index out of range in virtualbox</changelog>
  <changelog author="gaoruoshu &lt;gaoruoshu@huawei.com&gt; - 1.1.0-3" date="1690891200">- feature: enable application config</changelog>
  <changelog author="gaoruoshu &lt;gaoruoshu@huawei.com&gt; - 1.1.0-4" date="1692187200">- atune-collector: add backup for apps</changelog>
  <changelog author="gaoruoshu &lt;gaoruoshu@huawei.com&gt; - 1.1.0-5" date="1692705600">- feature: add [network] to CPI</changelog>
  <changelog author="gaoruoshu &lt;gaoruoshu@huawei.com&gt; - 1.1.0-6" date="1701259200">- feature: add rfs and rps/xps=multi to [network]</changelog>
  <changelog author="weiyaping &lt;weiyaping@xfusion.com&gt; - 1.1.0-7" date="1702641600">- fix bug: ProcSched.report: list index out of range</changelog>
  <changelog author="zhoupengcheng &lt;zhoupengcheng11@huawei.com&gt; - 1.1.0-8" date="1710244800">- fix CVE-2024-24897</changelog>
</package>
<package pkgid="915a51718bb03d9dc73028b2ad7a7a2404949df9ddf8a3ad48f90e043f74288c" name="authselect" arch="src">
  <version epoch="0" ver="1.2.4" rel="7.oe2203sp1"/>
  <changelog author="yixiangzhike &lt;zhangxingliang3@huawei.com&gt; - 1.2.2-3" date="1626696000">- Delete unnecessary gdb from BuildRequires</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.2.4-1" date="1638273600">- update to 1.2.4</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.2.4-2" date="1642161600">- revert "remove authselect compat package"</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.2.4-3" date="1647864000">- fix change date for version 1.2.4-2 in changelog</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.2.4-4" date="1651233600">- delete duplicate file README.md from authselect-help</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.2.4-5" date="1652616000">- provide default directory /etc/authselect</changelog>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 1.2.4-6" date="1660564800">- cli: fix memory handling with new popt library</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.2.4-7" date="1685448000">- fix the failure of login by root</changelog>
</package>
<package pkgid="33781a91054021e3fbe80efd7b9532f4248ec49f15fff1f077cfb6a5f0722ca7" name="avahi" arch="src">
  <version epoch="0" ver="0.8" rel="15.oe2203sp1"/>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 0.8-6" date="1623758400">- Type:CVE
- ID:CVE-2021-3468
- SUG:NA
- DESC:fix CVE-2021-3468</changelog>
  <changelog author="Wenlong Ding &lt;wenlong.ding@turbolinux.com.cn&gt; - 0.8-7" date="1624276800">- Add requires avahi-gobeject when install avahi-devel.</changelog>
  <changelog author="Wenlong Ding &lt;wenlong.ding@turbolinux.com.cn&gt; - 0.8-8" date="1624363200">- Fix error spell of avahi-gobject.</changelog>
  <changelog author="zhanzhimin &lt;zhanzhimin@huawei.com&gt; - 0.8-9" date="1626091200">- fix build failure due to lack of gcc-c++ buildrequires</changelog>
  <changelog author="liuyuemng &lt;liuyumeng5@huawei.com&gt; - 0.8-10" date="1626264000">- Type:CVE
- ID:CVE-2021-36217
- SUG:NA
- DESC:fix CVE-2021-36217</changelog>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 0.8-11" date="1630324800">- Add autoipd,gobject-devel subpackages</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.8-12" date="1636372800">- Add avahi-glib-devel subpackages</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 0.8-13" date="1654948800">- DESC:avahi.rpm no longer providers avahi-autoiod.rpm</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-15" date="1681300800">- fix CVE-2023-1981</changelog>
</package>
<package pkgid="595a947fa81162fd4d79df2e4def2a642da3d0fc53a827dcda0446258f66b808" name="avahi" arch="src">
  <version epoch="0" ver="0.8" rel="16.oe2203sp1"/>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.8-12" date="1636372800">- Add avahi-glib-devel subpackages</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 0.8-13" date="1654948800">- DESC:avahi.rpm no longer providers avahi-autoiod.rpm</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-15" date="1681300800">- fix CVE-2023-1981</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-16" date="1697457600">- fix CVE-2023-38470</changelog>
</package>
<package pkgid="6324c6149ac11a1e06f740f0ca28359e90a8c623cd1227b09a635a98a9979b32" name="avahi" arch="src">
  <version epoch="0" ver="0.8" rel="17.oe2203sp1"/>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.8-12" date="1636372800">- Add avahi-glib-devel subpackages</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 0.8-13" date="1654948800">- DESC:avahi.rpm no longer providers avahi-autoiod.rpm</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-15" date="1681300800">- fix CVE-2023-1981</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-16" date="1697457600">- fix CVE-2023-38470</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-17" date="1699272000">- fix CVE-2023-38469 CVE-2023-38471 CVE-2023-38472 CVE-2023-38473</changelog>
</package>
<package pkgid="4edc4cae8084a8c8a02767457845e8da618b99983b0436ac7e97d435e7311e79" name="avahi" arch="src">
  <version epoch="0" ver="0.8" rel="19.oe2203sp1"/>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 0.8-13" date="1654948800">- DESC:avahi.rpm no longer providers avahi-autoiod.rpm</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-15" date="1679918400">- add build_cross to avoid install packages and files in self-build</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-16" date="1681300800">- fix CVE-2023-1981</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-17" date="1697457600">- fix CVE-2023-38470</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-18" date="1699272000">- fix CVE-2023-38469 CVE-2023-38471 CVE-2023-38472 CVE-2023-38473</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-19" date="1707048000">- delete redundant patch</changelog>
</package>
<package pkgid="5b693870909c857bc7f668af9c32ab68360a8d2f52693c45a9997e1192b5c5e1" name="avahi" arch="src">
  <version epoch="0" ver="0.8" rel="20.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-15" date="1679918400">- add build_cross to avoid install packages and files in self-build</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-16" date="1681300800">- fix CVE-2023-1981</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-17" date="1697457600">- fix CVE-2023-38470</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-18" date="1699272000">- fix CVE-2023-38469 CVE-2023-38471 CVE-2023-38472 CVE-2023-38473</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-19" date="1707048000">- delete redundant patch</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-20" date="1719230400">- disable avahi-daemon.service default</changelog>
</package>
<package pkgid="1983106b4cb6ea4c23cf6b6809b13957755786c6ed4905c618aedb6338584465" name="batik" arch="src">
  <version epoch="0" ver="1.10" rel="7.oe2203sp1"/>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 1.10-5" date="1615464000">- fix CVE-2020-11987</changelog>
  <changelog author="lingsheng &lt;lingsheng@huawei.com&gt; - 1.10-6" date="1617192000">- Remove unneeded rhino and jai_imageio in classpath</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 1.10-7" date="1672228800">- Fix CVE-2022-41704 and CVE-2022-42890</changelog>
</package>
<package pkgid="1f04ceb6115a5386806c600b6b82614920985a78f4758ab6ce0dcc0391ee17b9" name="batik" arch="src">
  <version epoch="0" ver="1.17" rel="1.oe2203sp1"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 1.10-7" date="1672228800">- Fix CVE-2022-41704 and CVE-2022-42890</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 1.10-8" date="1675425600">- Add install require java-1.8.0-openjdk</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1.17-1" date="1694088000">- Update to 1.17 for fix CVE-2022-38398,CVE-2022-38648,CVE-2022-40146,CVE-2022-44729 and CVE-2022-44730</changelog>
</package>
<package pkgid="1c64143e48f376787e459d95d52f0324c20987be68a4e9c58615aec4e66d3253" name="bind" arch="src">
  <version epoch="32" ver="9.16.23" rel="15.oe2203sp1"/>
  <changelog author="jiangheng&lt;jiangheng12@huawei.com&gt; - 9.16.23-6" date="1644408000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:limit number of test threads to reduce test execution time</changelog>
  <changelog author="jiangheng&lt;jiangheng12@huawei.com&gt; - 9.16.23-7" date="1648641600">- Type:CVE
- CVE:CVE-2022-0396
- SUG:NA
- DESC:fix CVE-2022-0396</changelog>
  <changelog author="jiangheng&lt;jiangheng12@huawei.com&gt; - 9.16.23-8" date="1649678400">- Type:CVE
- CVE:CVE-2021-25220
- SUG:NA
- DESC:fix CVE-2021-25220</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@uniontech.com&gt; - 32:9.16.23-9" date="1661947200">- DESC: fix downgrade bind-utils conflict bind-dnssec-doc</changelog>
  <changelog author="huangyu &lt;huangyu106@huawei.com&gt; - 32:9.16.23-10" date="1664366400">- DESC:fix CVE-2022-2881 CVE-2022-2906 CVE-2022-2795 CVE-2022-38177 CVE-2022-38178
CVE-2022-3080</changelog>
  <changelog author="huangyu &lt;huangyu106@huawei.com&gt; - 32:9.16.23-11" date="1664452800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Fix catalog zone reconfiguration crash
Improve the logging on failed TCP accept
Separate the locked parts of dns_zone_catz_enable-di
Check if key-metadata is modified before writing
Fix CID-352776 Concurrent data access violations
Require valid key for dst_key functions</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 32:9.16.23-12" date="1669464000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-13" date="1672833600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-14" date="1675425600">- Type:CVE
- CVE:CVE-2022-3736 CVE-2022-3924 CVE-2022-3094
- SUG:NA
- DESC:fix CVE-2022-3736 CVE-2022-3924 CVE-2022-3094</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-15" date="1675944000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix output expected information when install bing-sdborbind-sdb-chroot</changelog>
</package>
<package pkgid="e74314ded3d86f38ec3a7322805c553b1e20f16e0b303abb905193678f8e7fec" name="bind" arch="src">
  <version epoch="32" ver="9.16.23" rel="18.oe2203sp1"/>
  <changelog author="yangchenguang &lt;yangchenguang@uniontech.com&gt; - 32:9.16.23-9" date="1661947200">- DESC: fix downgrade bind-utils conflict bind-dnssec-doc</changelog>
  <changelog author="huangyu &lt;huangyu106@huawei.com&gt; - 32:9.16.23-10" date="1664366400">- DESC:fix CVE-2022-2881 CVE-2022-2906 CVE-2022-2795 CVE-2022-38177 CVE-2022-38178
CVE-2022-3080</changelog>
  <changelog author="huangyu &lt;huangyu106@huawei.com&gt; - 32:9.16.23-11" date="1664452800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Fix catalog zone reconfiguration crash
Improve the logging on failed TCP accept
Separate the locked parts of dns_zone_catz_enable-di
Check if key-metadata is modified before writing
Fix CID-352776 Concurrent data access violations
Require valid key for dst_key functions</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 32:9.16.23-12" date="1669464000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-13" date="1672833600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-14" date="1675425600">- Type:CVE
- CVE:CVE-2022-3736 CVE-2022-3924 CVE-2022-3094
- SUG:NA
- DESC:fix CVE-2022-3736 CVE-2022-3924 CVE-2022-3094</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-15" date="1675944000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix output expected information when install bing-sdborbind-sdb-chroot</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-16" date="1677326400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-17" date="1681214400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Don't perform arithmetic on NULL pointers
Accept 'in=NULL' with 'inlen=0' in isc_{half}siphash24
Fix a use-after-free bug in dns_zonemgr_releasezone()
Fix dns_fwdtable_addfwd() error path cleanup bug
Detach the views in zone_shutdown(), not in zone_free()
Detach the zone views outside of the zone lock
delay trust anchor management until zones are loaded
In hmac_createctx free ctx on isc_hmac_init failure
Fix dns_kasp_attach / dns_kasp_detach usage
Fix backport error in 84929d1c
Fix a cleanup bug when isc_task_create() fails in dns_catz_new_zones()
Searching catzs-&gt;zones requires a read lock
Fix view's zones reverting bug during reconfiguration</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-18" date="1687780800">- Type:CVE
- CVE:CVE-2023-2911 CVE-2023-2828
- SUG:NA
- DESC:fix CVE-2023-2911 CVE-2023-2828</changelog>
</package>
<package pkgid="16360ff206feca25d18cd2198291eb7964edfafd734fba1214329026156ff970" name="bind" arch="src">
  <version epoch="32" ver="9.16.23" rel="20.oe2203sp1"/>
  <changelog author="huangyu &lt;huangyu106@huawei.com&gt; - 32:9.16.23-11" date="1664452800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Fix catalog zone reconfiguration crash
Improve the logging on failed TCP accept
Separate the locked parts of dns_zone_catz_enable-di
Check if key-metadata is modified before writing
Fix CID-352776 Concurrent data access violations
Require valid key for dst_key functions</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 32:9.16.23-12" date="1669464000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-13" date="1672833600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-14" date="1675425600">- Type:CVE
- CVE:CVE-2022-3736 CVE-2022-3924 CVE-2022-3094
- SUG:NA
- DESC:fix CVE-2022-3736 CVE-2022-3924 CVE-2022-3094</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-15" date="1675944000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix output expected information when install bing-sdborbind-sdb-chroot</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-16" date="1677326400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-17" date="1681214400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Don't perform arithmetic on NULL pointers
Accept 'in=NULL' with 'inlen=0' in isc_{half}siphash24
Fix a use-after-free bug in dns_zonemgr_releasezone()
Fix dns_fwdtable_addfwd() error path cleanup bug
Detach the views in zone_shutdown(), not in zone_free()
Detach the zone views outside of the zone lock
delay trust anchor management until zones are loaded
In hmac_createctx free ctx on isc_hmac_init failure
Fix dns_kasp_attach / dns_kasp_detach usage
Fix backport error in 84929d1c
Fix a cleanup bug when isc_task_create() fails in dns_catz_new_zones()
Searching catzs-&gt;zones requires a read lock
Fix view's zones reverting bug during reconfiguration</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-18" date="1687780800">- Type:CVE
- CVE:CVE-2023-2911 CVE-2023-2828
- SUG:NA
- DESC:fix CVE-2023-2911 CVE-2023-2828</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-19" date="1693828800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Disable the internal memory allocator by default</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-20" date="1695470400">- Type:CVE
- CVE:CVE-2023-3341
- SUG:NA
- DESC:fix CVE-2023-3341</changelog>
</package>
<package pkgid="d1c694cb5bd3ff8fa0b5c0a01f6f8018890df10ed42e211c2136ec0687fd4695" name="bind" arch="src">
  <version epoch="32" ver="9.16.23" rel="21.oe2203sp1"/>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 32:9.16.23-12" date="1669464000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-13" date="1672833600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-14" date="1675425600">- Type:CVE
- CVE:CVE-2022-3736 CVE-2022-3924 CVE-2022-3094
- SUG:NA
- DESC:fix CVE-2022-3736 CVE-2022-3924 CVE-2022-3094</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-15" date="1675944000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix output expected information when install bing-sdborbind-sdb-chroot</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-16" date="1677326400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-17" date="1681214400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Don't perform arithmetic on NULL pointers
Accept 'in=NULL' with 'inlen=0' in isc_{half}siphash24
Fix a use-after-free bug in dns_zonemgr_releasezone()
Fix dns_fwdtable_addfwd() error path cleanup bug
Detach the views in zone_shutdown(), not in zone_free()
Detach the zone views outside of the zone lock
delay trust anchor management until zones are loaded
In hmac_createctx free ctx on isc_hmac_init failure
Fix dns_kasp_attach / dns_kasp_detach usage
Fix backport error in 84929d1c
Fix a cleanup bug when isc_task_create() fails in dns_catz_new_zones()
Searching catzs-&gt;zones requires a read lock
Fix view's zones reverting bug during reconfiguration</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-18" date="1687780800">- Type:CVE
- CVE:CVE-2023-2911 CVE-2023-2828
- SUG:NA
- DESC:fix CVE-2023-2911 CVE-2023-2828</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-19" date="1693828800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Disable the internal memory allocator by default</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-20" date="1695470400">- Type:CVE
- CVE:CVE-2023-3341
- SUG:NA
- DESC:fix CVE-2023-3341</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-21" date="1710504000">- Type:CVE
- CVE:CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868
- SUG:NA
- DESC:fix CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868 and sync some patches from upstream</changelog>
</package>
<package pkgid="7d3fdf1596ef96fd193201016b1d33b4485b23e682807f760e15abec4c7c7efe" name="bind" arch="src">
  <version epoch="32" ver="9.16.23" rel="23.oe2203sp1"/>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-14" date="1675425600">- Type:CVE
- CVE:CVE-2022-3736 CVE-2022-3924 CVE-2022-3094
- SUG:NA
- DESC:fix CVE-2022-3736 CVE-2022-3924 CVE-2022-3094</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-15" date="1675944000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix output expected information when install bing-sdborbind-sdb-chroot</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-16" date="1677326400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-17" date="1681214400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Don't perform arithmetic on NULL pointers
Accept 'in=NULL' with 'inlen=0' in isc_{half}siphash24
Fix a use-after-free bug in dns_zonemgr_releasezone()
Fix dns_fwdtable_addfwd() error path cleanup bug
Detach the views in zone_shutdown(), not in zone_free()
Detach the zone views outside of the zone lock
delay trust anchor management until zones are loaded
In hmac_createctx free ctx on isc_hmac_init failure
Fix dns_kasp_attach / dns_kasp_detach usage
Fix backport error in 84929d1c
Fix a cleanup bug when isc_task_create() fails in dns_catz_new_zones()
Searching catzs-&gt;zones requires a read lock
Fix view's zones reverting bug during reconfiguration</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-18" date="1687780800">- Type:CVE
- CVE:CVE-2023-2911 CVE-2023-2828
- SUG:NA
- DESC:fix CVE-2023-2911 CVE-2023-2828</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-19" date="1693828800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Disable the internal memory allocator by default</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-20" date="1695470400">- Type:CVE
- CVE:CVE-2023-3341
- SUG:NA
- DESC:fix CVE-2023-3341</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-21" date="1710504000">- Type:CVE
- CVE:CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868
- SUG:NA
- DESC:fix CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868 and sync some patches from upstream</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaweic.om&gt; - 32:9.16.23-22" date="1711022400">- Type:bugfix
- CVE:
- SUG:NA
- DESC:update release version</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-23" date="1722600000">- Type:CVE
- CVE:CVE-2024-1975,CVE-2024-4076,CVE-2024-1737
- SUG:NA
- DESC:fix CVE-2024-1975 CVE-2024-4076 CVE-2024-1737</changelog>
</package>
<package pkgid="c2fc1cb54a416ce08aa4a35fee1a42920d63be2a9b70d7a22d143fec181845d3" name="binutils" arch="src">
  <version epoch="0" ver="2.37" rel="19.oe2203sp1"/>
  <changelog author="Wei, Qiang &lt;qiang.wei@suse.com&gt; - 2.37-11" date="1662120000">- Fix man page empty issue</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 2.37-12" date="1665230400">- Fix Aarch64 EFI PE section address overlap issue.</changelog>
  <changelog author="konglidong &lt;konglidong@uniontech.com&gt; - 2.37-13" date="1666094400">- DESC:fix the changelog exception macro</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 2.37-14" date="1666612800">- DESC:Prevents the use of null pointers and sets the pointer to null after being used.</changelog>
  <changelog author="dingguangya &lt;dingguangya1@huawei.com&gt; - 2.37-15" date="1681992000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Fix gold linker relocation offset</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.37-16" date="1692792000">- fix CVE-2022-47008</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.37-17" date="1692878400">- fix CVE-2022-47011</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.37-18" date="1693137600">- fix CVE-2022-47696</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.37-19" date="1693310400">- fix CVE-2021-46174</changelog>
</package>
<package pkgid="43eca35c4817a04cde1aba590f245ef3388ce41986ced8ef9b6ee6da144cb0c4" name="binutils" arch="src">
  <version epoch="0" ver="2.37" rel="23.oe2203sp1"/>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 2.37-14" date="1666612800">- DESC:Prevents the use of null pointers and sets the pointer to null after being used.</changelog>
  <changelog author="dingguangya &lt;dingguangya1@huawei.com&gt; - 2.37-15" date="1681992000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Fix gold linker relocation offset</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.37-16" date="1692792000">- fix CVE-2022-47008</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.37-17" date="1692878400">- fix CVE-2022-47011</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.37-18" date="1693137600">- fix CVE-2022-47696</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.37-19" date="1693310400">- fix CVE-2021-46174</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 2.37-20" date="1693396800">- fix CVE-2023-1972</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.37-21" date="1693483200">- fix CVE-2022-48064</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; -2.37-22" date="1693483201">- fix CVE-2022-4285</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 2.37-23" date="1693915200">- Delete post, preun, postun for help package</changelog>
</package>
<package pkgid="a4a55c377dc92da689fadc2bfc29bb2c44efd3a40603944c1a969e3454b6133f" name="bluez" arch="src">
  <version epoch="0" ver="5.54" rel="17.oe2203sp1"/>
  <changelog author="xingxing &lt;xingxing9@h-partners.com&gt; - 5.54-11" date="1644667200">- Type:CVE
- CVE:CVE-2021-43400
- SUG:NA
- DESC:fix CVE-2021-43400</changelog>
  <changelog author="xingxing &lt;xingxing9@h-partners.com&gt; - 5.54-12" date="1646136000">- Type:CVE
- CVE:CVE-2021-0129
- SUG:NA
- DESC:fix CVE-2021-0129</changelog>
  <changelog author="xingxing &lt;xingxing9@h-partners.com&gt; - 5.54-13" date="1647604800">- Type:CVE
- CVE:CVE-2022-0204
- SUG:NA
- DESC:fix CVE-2022-0204 and add prefix for CVE-2021-0129</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 5.54-14" date="1657713600">- DESC:fix CVE-2021-41229</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 5.54-15" date="1662552000">- DESC:fix CVE-2022-39176,CVE-2022-39177</changelog>
  <changelog author="zhangzhixin &lt;zhixin.zhang@i-soft.com.cn&gt; - 5.54-16" date="1670500800">- add sw64 patch</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 5.54-17" date="1681819200">- DESC:fix CVE-2023-27349</changelog>
</package>
<package pkgid="7bed58004f672d6663ed823f6c3ecea130ab10859b670b6ff40cf151461fcb8e" name="bluez" arch="src">
  <version epoch="0" ver="5.54" rel="18.oe2203sp1"/>
  <changelog author="xingxing &lt;xingxing9@h-partners.com&gt; - 5.54-11" date="1644667200">- Type:CVE
- CVE:CVE-2021-43400
- SUG:NA
- DESC:fix CVE-2021-43400</changelog>
  <changelog author="xingxing &lt;xingxing9@h-partners.com&gt; - 5.54-12" date="1646136000">- Type:CVE
- CVE:CVE-2021-0129
- SUG:NA
- DESC:fix CVE-2021-0129</changelog>
  <changelog author="xingxing &lt;xingxing9@h-partners.com&gt; - 5.54-13" date="1647604800">- Type:CVE
- CVE:CVE-2022-0204
- SUG:NA
- DESC:fix CVE-2022-0204 and add prefix for CVE-2021-0129</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 5.54-14" date="1657713600">- DESC:fix CVE-2021-41229</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 5.54-15" date="1662552000">- DESC:fix CVE-2022-39176,CVE-2022-39177</changelog>
  <changelog author="zhangzhixin &lt;zhixin.zhang@i-soft.com.cn&gt; - 5.54-16" date="1670500800">- add sw64 patch</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 5.54-17" date="1681819200">- DESC:fix CVE-2023-27349</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 5.54-18" date="1702036800">- fix CVE-2023-45866</changelog>
</package>
<package pkgid="b62830356d1cec064b3249c2821954d7ee28385ed83962cf1a6f3a4aa02a4032" name="bluez" arch="src">
  <version epoch="0" ver="5.54" rel="19.oe2203sp1"/>
  <changelog author="xingxing &lt;xingxing9@h-partners.com&gt; - 5.54-11" date="1644667200">- Type:CVE
- CVE:CVE-2021-43400
- SUG:NA
- DESC:fix CVE-2021-43400</changelog>
  <changelog author="xingxing &lt;xingxing9@h-partners.com&gt; - 5.54-12" date="1646136000">- Type:CVE
- CVE:CVE-2021-0129
- SUG:NA
- DESC:fix CVE-2021-0129</changelog>
  <changelog author="xingxing &lt;xingxing9@h-partners.com&gt; - 5.54-13" date="1647604800">- Type:CVE
- CVE:CVE-2022-0204
- SUG:NA
- DESC:fix CVE-2022-0204 and add prefix for CVE-2021-0129</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 5.54-14" date="1657713600">- DESC:fix CVE-2021-41229</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 5.54-15" date="1662552000">- DESC:fix CVE-2022-39176,CVE-2022-39177</changelog>
  <changelog author="zhangzhixin &lt;zhixin.zhang@i-soft.com.cn&gt; - 5.54-16" date="1670500800">- add sw64 patch</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 5.54-17" date="1681819200">- DESC:fix CVE-2023-27349</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 5.54-18" date="1702036800">- fix CVE-2023-45866</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 5.54-19" date="1703246400">- fix CVE-2023-50229,CVE-2023-50230</changelog>
</package>
<package pkgid="c914e325dbde9c56bdcd412392dedd494d6dc107450613980212119c51ad5b1a" name="bouncycastle" arch="src">
  <version epoch="0" ver="1.67" rel="2.oe2203sp1"/>
  <changelog author="liwu &lt;liwu13@huawei.com&gt; - 1.61-5" date="1627732800">- fix CVE-2020-15522</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 1.67-1" date="1669377600">- Update to 1.67</changelog>
  <changelog author="licihua &lt;licihua@huawei.com&gt; - 1.67-2" date="1687694400">- fix cve CVE-2023-33201</changelog>
</package>
<package pkgid="62b27d0399c96afd275288ec1916d0eec4191e9f26128dcc9367f8832d03fb08" name="bpftool" arch="src">
  <version epoch="0" ver="6.8.0" rel="2.oe2203sp1"/>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 6.8.0-1" date="1700568000">- Init package</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 6.8.0-2" date="1702468800">- Combine main package and subpackage. Keep consistent with the previous version.</changelog>
</package>
<package pkgid="c65f52a0adb7ebf641e155eb8bab01b3b52c4ae53467051e06a1ad1746ac81dc" name="bubblewrap" arch="src">
  <version epoch="0" ver="0.4.1" rel="2.oe2203sp1"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 0.4.1-2" date="1723809600">- Add --bind-fd and --ro-bind-fd to let you bind a O_PATH fd for flatpak fix CVE-2024-42472</changelog>
</package>
<package pkgid="266fe5338349111c1e138b0bf4fe84aaca15200b0a0bc16b5f7a62394453c1e6" name="busybox" arch="src">
  <version epoch="1" ver="1.34.1" rel="19.oe2203sp1"/>
  <changelog author="jikui &lt;jikui2@huawei.com&gt; - 1:1.33.1-10" date="1637582400">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2021-42374 and CVE-2021-42377</changelog>
  <changelog author="xiechengliang &lt;xiechengliang1@huawei.com&gt; - 1:1.33.1-11" date="1637755200">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2021-42373 CVE-2021-42375 and CVE-2021-42376</changelog>
  <changelog author="xiechengliang &lt;xiechengliang1@huawei.com&gt; - 1:1.33.1-12" date="1637841600">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2021-42378 CVE-2021-42379 CVE-2021-42380 CVE-2021-42381 CVE-2021-42382 CVE-2021-42383 CVE-2021-42384 CVE-2021-42385 and CVE-2021-42386</changelog>
  <changelog author="jikui &lt;jikui2@huawei.com&gt; - 1:1.34.1-13" date="1638187200">- Type:enhancement
- Id:NA
- SUG:NA
- DESC:update busybox to 1.34.1</changelog>
  <changelog author="jikui &lt;jikui2@huawei.com&gt; - 1:1.34.1-14" date="1650369600">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2022-28391</changelog>
  <changelog author="jikui &lt;jikui2@huawei.com&gt; - 1:1.34.1-15" date="1651752000">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:add epoch field in spec file</changelog>
  <changelog author="jikui &lt;jikui2@huawei.com&gt; - 1:1.34.1-16" date="1660910400">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2022-30065</changelog>
  <changelog author="jikui &lt;jikui2@huawei.com&gt; - 1:1.34.1-17" date="1666958400">- fix use after free in bc module</changelog>
  <changelog author="huangsong &lt;huangsong14@huawei.com&gt; - 1:1.34.1-18" date="1693396800">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2022-48174</changelog>
  <changelog author="huangsong &lt;huangsong14@huawei.com&gt; - 1:1.34.1-19" date="1693483200">- Type:CVE
- Id:NA
- SUG:NA
- DESC:re-fixed CVE-2022-48174</changelog>
</package>
<package pkgid="a1626298a783d1f6142e4dc06f4614d32f3aa4dbf34e0f58993ea905517a1553" name="busybox" arch="src">
  <version epoch="1" ver="1.34.1" rel="20.oe2203sp1"/>
  <changelog author="jikui &lt;jikui2@huawei.com&gt; - 1:1.34.1-16" date="1660910400">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2022-30065</changelog>
  <changelog author="jikui &lt;jikui2@huawei.com&gt; - 1:1.34.1-17" date="1666958400">- fix use after free in bc module</changelog>
  <changelog author="huangsong &lt;huangsong14@huawei.com&gt; - 1:1.34.1-18" date="1693396800">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2022-48174</changelog>
  <changelog author="huangsong &lt;huangsong14@huawei.com&gt; - 1:1.34.1-19" date="1693483200">- Type:CVE
- Id:NA
- SUG:NA
- DESC:re-fixed CVE-2022-48174</changelog>
  <changelog author="liuxu &lt;liuxu156@huawei.com&gt; - 1:1.34.1-20" date="1718798400">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2023-42364 CVE-2023-42365 CVE-2023-42366 CVE-2023-42363</changelog>
</package>
<package pkgid="e84f9f0e41df763d09a89c1b16258f4f592dc8e7adf4d4a01cf75ffaed179875" name="byacc" arch="src">
  <version epoch="0" ver="2.0.20210808" rel="4.oe2203sp1"/>
  <changelog author="wangjie&lt;wangjie294@huawei.com&gt; - 2.0.20210109" date="1612180800">- DESC:upgrade 2.0.20210109</changelog>
  <changelog author="tianwei&lt;tianwei12@huawei.com&gt; - 2.0.20210808" date="1640433600">- DESC:upgrade to 2.0.20210808</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2.0.20210808-2" date="1656504000">- DESC:enable check test suite</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 2.0.20210808-3" date="1669032000">- Modify invalid Source</changelog>
  <changelog author="zhoupengcheng &lt;zhoupengcheng11@huawei.com&gt; - 2.0.20210808-4" date="1672056000">- fix CVE-2021-33641 and CVE-2021-33642</changelog>
</package>
<package pkgid="b9607c6aa18ae3ad80a0963e4dd05fc61648bf6f7a47a4e1b5849e9f4a161ac9" name="c-ares" arch="src">
  <version epoch="0" ver="1.18.1" rel="4.oe2203sp1"/>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 1.17.1-2" date="1628769600">- fix CVE-2021-3672</changelog>
  <changelog author="quanhongfei &lt;quanhongfei@huawei.com&gt; - 1.18.1-1" date="1638446400">- Type:requirements
- Id:NA
- SUG:NA
- DESC:update c-ares to 1.18.1</changelog>
  <changelog author="quanhongfei &lt;quanhongfei@h-partners.com&gt; - 1.18.1-2" date="1650283200">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:add libcares.a to c-ares-devel</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.18.1-3" date="1654776000">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:enable test</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 1.18.1-4" date="1676030400">- Type:cves
- CVE:CVE-2022-4904
- SUG:NA
- DESC:fix CVE-2022-4904</changelog>
</package>
<package pkgid="11ed20fdb835609c673cd0d8a497b357e7a0112e5c3ae43407b9250075f149c6" name="c-ares" arch="src">
  <version epoch="0" ver="1.18.1" rel="5.oe2203sp1"/>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 1.17.1-2" date="1628769600">- fix CVE-2021-3672</changelog>
  <changelog author="quanhongfei &lt;quanhongfei@huawei.com&gt; - 1.18.1-1" date="1638446400">- Type:requirements
- Id:NA
- SUG:NA
- DESC:update c-ares to 1.18.1</changelog>
  <changelog author="quanhongfei &lt;quanhongfei@h-partners.com&gt; - 1.18.1-2" date="1650283200">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:add libcares.a to c-ares-devel</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.18.1-3" date="1654776000">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:enable test</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 1.18.1-4" date="1676030400">- Type:cves
- CVE:CVE-2022-4904
- SUG:NA
- DESC:fix CVE-2022-4904</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 1.18.1-5" date="1677326400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:delete a static library file
       add BuildRequires make to fix build problem</changelog>
</package>
<package pkgid="e3ece3a16ab23761d38ff4af3779291e2886af52f055bbd97d999d732d1032ba" name="c-ares" arch="src">
  <version epoch="0" ver="1.18.1" rel="7.oe2203sp1"/>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 1.17.1-2" date="1628769600">- fix CVE-2021-3672</changelog>
  <changelog author="quanhongfei &lt;quanhongfei@huawei.com&gt; - 1.18.1-1" date="1638446400">- Type:requirements
- Id:NA
- SUG:NA
- DESC:update c-ares to 1.18.1</changelog>
  <changelog author="quanhongfei &lt;quanhongfei@h-partners.com&gt; - 1.18.1-2" date="1650283200">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:add libcares.a to c-ares-devel</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.18.1-3" date="1654776000">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:enable test</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 1.18.1-4" date="1676030400">- Type:cves
- CVE:CVE-2022-4904
- SUG:NA
- DESC:fix CVE-2022-4904</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 1.18.1-5" date="1677326400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:delete a static library file
       add BuildRequires make to fix build problem</changelog>
  <changelog author="hehuazhen &lt;hehuazhen@huawei.com&gt; - 1.18.1-6" date="1685275200">- Type:CVE
- CVE:CVE-2023-32067 CVE-2023-31130
- SUG:restart
- DESC:fix CVE-2023-32067 CVE-2023-31130</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 1.18.1-7" date="1685361600">- Type:CVE
- CVE:CVE-2023-31124 CVE-2023-31147
- SUG:NA
- DESC:fix CVE-2023-31124 CVE-2023-31147</changelog>
</package>
<package pkgid="98f0917b6f62aff759fb1980a2834bf601c3f4c6702a3d64a770266ec28a1e23" name="c-ares" arch="src">
  <version epoch="0" ver="1.18.1" rel="8.oe2203sp1"/>
  <changelog author="quanhongfei &lt;quanhongfei@h-partners.com&gt; - 1.18.1-2" date="1650283200">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:add libcares.a to c-ares-devel</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.18.1-3" date="1654776000">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:enable test</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 1.18.1-4" date="1676030400">- Type:cves
- CVE:CVE-2022-4904
- SUG:NA
- DESC:fix CVE-2022-4904</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 1.18.1-5" date="1677326400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:delete a static library file
       add BuildRequires make to fix build problem</changelog>
  <changelog author="hehuazhen &lt;hehuazhen@huawei.com&gt; - 1.18.1-6" date="1685275200">- Type:CVE
- CVE:CVE-2023-32067 CVE-2023-31130
- SUG:restart
- DESC:fix CVE-2023-32067 CVE-2023-31130</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 1.18.1-7" date="1685361600">- Type:CVE
- CVE:CVE-2023-31124 CVE-2023-31147
- SUG:NA
- DESC:fix CVE-2023-31124 CVE-2023-31147</changelog>
  <changelog author="liweigang &lt;izmirvii@gmail.com&gt; - 1.18.1-8" date="1709035200">- Type: CVE
- CVE: CVE-2024-25629
- SUG: NA
- DESC: fix CVE-2024-25629</changelog>
</package>
<package pkgid="a25dcb62cae038869f86b312ceef06127282f21dcacd5b0e9f12fee0b14ec74e" name="ca-certificates" arch="src">
  <version epoch="0" ver="2023.2.60" rel="1.oe2203sp1"/>
  <changelog author="liudabo &lt;liudabo1@huawei.com&gt; - 2021.2.46-2" date="1623326400">- Refresh the original the original certificate file and delete the insercure certificates</changelog>
  <changelog author="liudabo &lt;liudabo1@huawei.com&gt; - 2021.2.52-1" date="1638360000">- upgrade version to 2021.2.52</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2021.2.52-2" date="1666440000">- lagging install ca-legacy and update-ca-trust</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2023.2.60-1" date="1686052800">- upgrade version to 2023.2.60</changelog>
</package>
<package pkgid="5c13a8c437f144df7df2d6829805e245ba2ca4a864411e607f8dd32df00fd91b" name="ca-certificates" arch="src">
  <version epoch="0" ver="2023.2.60" rel="2.oe2203sp1"/>
  <changelog author="liudabo &lt;liudabo1@huawei.com&gt; - 2021.2.52-1" date="1638360000">- upgrade version to 2021.2.52</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2021.2.52-2" date="1666440000">- lagging install ca-legacy and update-ca-trust</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2023.2.60-1" date="1686052800">- upgrade version to 2023.2.60</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2023.2.60-2" date="1699272000">- delete the unsecure certificates</changelog>
</package>
<package pkgid="91191fdaa32181e717b35e6bbd5fd98699a6dbb18641a030d2fd2a9d50343f02" name="cdrkit" arch="src">
  <version epoch="0" ver="1.1.11" rel="51.oe2203sp1"/>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 1.1.11-46" date="1666699200">- rebuild for next release</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 1.1.11-47" date="1667476800">- add sw64 patch</changelog>
  <changelog author="wangkerong&lt;wangkerong@h-partners.com&gt; - 1.1.11-48" date="1668600000">- fix empty link</changelog>
  <changelog author="wangkerong&lt;wangkerong@h-partners.com&gt; - 1.1.11-49" date="1669204800">- fix spell error</changelog>
  <changelog author="yueyuankun&lt;yueyuankun@kylinos.cn&gt; - 1.1.11-50" date="1698667200">- Type:update
- ID:NA
- SUG:NA
- DESC:delete Requires git</changelog>
  <changelog author="zhangpan&lt;zhangpan103@h-partners.com&gt; - 1.1.11-51" date="1704369600">- Type:bugfix
- ID:NA
- SUG:NA
- delete autosetup macro in changelog</changelog>
</package>
<package pkgid="22f550f522fcbb742019a6ab6081766e8793b8c96d995e2840b18f3841036e45" name="ceph" arch="src">
  <version epoch="2" ver="16.2.7" rel="14.oe2203sp1"/>
  <changelog author="yangxiaoliang &lt;yangxiaoliang07@163.com&gt; - 2:16.2.7-5" date="1661428800">- fix ceph-volume lvm list calls many times pvs</changelog>
  <changelog author="luo rixin &lt;luorixin@huawei.com&gt; - 2:16.2.7-6" date="1664366400">- fix osd read superblock error</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 2:16.2.7-7" date="1666785600">- Add sw64 architecture</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-8" date="1668081600">- rename sw64 patch and reduce compilation threads</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-9" date="1668427200">- fix CVE-2022-0670</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-10" date="1668513600">- keep the ceph.spec align with native community</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
</package>
<package pkgid="7bd6bda3444803e3b18471dfe8a154ef3fbbf9e53e3c6df7e39b8e75ffda4fc5" name="ceph" arch="src">
  <version epoch="2" ver="16.2.7" rel="19.oe2203sp1"/>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-10" date="1668513600">- keep the ceph.spec align with native community</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-15" date="1676376000">- fix error for uninstall cephadm</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-16" date="1687262400">- fix error when uninstall cephadm</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 2:16.2.7-17" date="1691668800">- fix sw_64 build error</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-18" date="1697716800">- fix CVE-2022-3854</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-19" date="1697716801">- fix CVE-2023-43040</changelog>
</package>
<package pkgid="968e74d6226d1f96bfbc718cc28f7983b40d8423a896dc6dbbbad4f67c167ef0" name="cfitsio" arch="src">
  <version epoch="0" ver="3.490" rel="2.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 3.490-1" date="1644408000">- Upgrade cfitsio to 3.490 to fix CVE-2018-3848,CVE-2018-3849</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; -3.490-2" date="1661342400">- Remove rpath</changelog>
</package>
<package pkgid="11e44b01347bf5bf42ac146d8187219bf9c044412ccb15b0616db606bdb570b5" name="chkconfig" arch="src">
  <version epoch="0" ver="1.21" rel="2.oe2203sp1"/>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.20-2" date="1661601600">- fix coredump while parseServiceInfo return non-zero</changelog>
  <changelog author="fushanqing &lt;fushanqing@kylinos.cn&gt; - 1.21-1" date="1665576000">- Update to 1.21</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 1.21-2" date="1723464000">- fix systemdActive()</changelog>
</package>
<package pkgid="9e0a4908ef5b97b6ebf3a002825ed5b39250c286d8597fb4a2b262430418de2f" name="chrony" arch="src">
  <version epoch="0" ver="4.1" rel="6.oe2203sp1"/>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 4.1-2" date="1666094400">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:client rework command and limit the length of command</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 4.1-3" date="1671796800">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:fix chrony to synchronize system clock</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 4.1-4" date="1672228800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:update the patching mode</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 4.1-5" date="1683374400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add BuildRequire for enable NTS</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 4.1-6" date="1691668800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add loongarch64 support</changelog>
</package>
<package pkgid="909abd8ea55b41a81e3a1499ab314b72757e571e357c4dc7e63bc40d061a3081" name="cjose" arch="src">
  <version epoch="0" ver="0.6.2.2" rel="1.oe2203sp1"/>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 0.6.2.2-1" date="1690200000">- Update to 0.6.2.2 for fix CVE-2023-37464</changelog>
</package>
<package pkgid="06ed84d3b72548743be74a4176c1fd84de3db80ee3cfa529a07951492d3e435d" name="clamav" arch="src">
  <version epoch="0" ver="0.103.12" rel="1.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 0.103.8-1" date="1678881600">- Update to 0.103.8 to fix CVE-2023-20032 and CVE-2023-20052</changelog>
  <changelog author="wangkai &lt;wang_kai001@hoperun.com&gt; - 0.103.9-1" date="1692705600">- Update to 0.103.9 to fix CVE-2023-20197</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 0.103.11-1" date="1710936000">- Upgrade to 0.103.11</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 0.103.12-1" date="1725624000">- Upgrade to 0.103.12</changelog>
</package>
<package pkgid="2e0bd73f5b505a87e73f23d12af49756c21bb525d99b405605430efe350f3b5d" name="clamav" arch="src">
  <version epoch="0" ver="0.103.8" rel="1.oe2203sp1"/>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 0.103.2-1" date="1618574400">- Upgrade to 0.103.2-1</changelog>
  <changelog author="caodongxia &lt;caodongxia@huawei.com&gt; - 0.103.2-2" date="1622548800">- fix left shift</changelog>
  <changelog author="caodongxia &lt;caodongxia@huawei.com&gt; - 0.103.2-3" date="1628510400">- fix clamonacc --version and --writer return value</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 0.103.2-4" date="1643025600">- Fix CVE-2022-20698</changelog>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 0.103.6-1" date="1652443200">- Upgrade to 0.103.6
- Fix CVE-2022-20785 CVE-2022-20771 CVE-2022-20770 CVE-2022-20792</changelog>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 0.103.6-2" date="1653480000">- Fix start clamav-clamonacc-service</changelog>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt; - 0.103.6-3" date="1653566400">- Fix the failure to execute the clambc command under the clamav package
- Fix clamonacc -w error</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 0.103.8-1" date="1678881600">- Update to 0.103.8 to fix CVE-2023-20032 and CVE-2023-20052</changelog>
</package>
<package pkgid="3af01588959a4225d1c33c9b590b21937f556f95952a775f4891dd1b650bc1f5" name="clamav" arch="src">
  <version epoch="0" ver="0.103.9" rel="1.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 0.103.2-4" date="1643025600">- Fix CVE-2022-20698</changelog>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 0.103.6-1" date="1652443200">- Upgrade to 0.103.6
- Fix CVE-2022-20785 CVE-2022-20771 CVE-2022-20770 CVE-2022-20792</changelog>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 0.103.6-2" date="1653480000">- Fix start clamav-clamonacc-service</changelog>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt; - 0.103.6-3" date="1653566400">- Fix the failure to execute the clambc command under the clamav package
- Fix clamonacc -w error</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 0.103.8-1" date="1678881600">- Update to 0.103.8 to fix CVE-2023-20032 and CVE-2023-20052</changelog>
  <changelog author="wangkai &lt;wang_kai001@hoperun.com&gt; - 0.103.9-1" date="1692705600">- Update to 0.103.9 to fix CVE-2023-20197</changelog>
</package>
<package pkgid="7db9bbb1365cea2a9fb7e52350fe07073b1348d9f8cfe21c0247de20a9607ca7" name="clang" arch="src">
  <version epoch="0" ver="12.0.1" rel="4.oe2203sp1"/>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 12.0.1-2" date="1666872000">- Rebuild for next release</changelog>
  <changelog author="liyunfei &lt;liyufnei33@huawei.com&gt; -12.0.1-3" date="1706184000">- Add Buildrequires: llvm-libs</changelog>
  <changelog author="liyunfei &lt;liyufnei33@huawei.com&gt; -12.0.1-4" date="1716379200">- Fix the x86_64 rpath issue</changelog>
</package>
<package pkgid="cbdc316554c12019868dcdfa10b808e31d7d0cb9a6f37f62eeb498206267358e" name="clibcni" arch="src">
  <version epoch="0" ver="2.0.7" rel="8.oe2203sp1"/>
  <changelog author="haozi007 &lt;liuhao27@huawei.com&gt; - 2.0.6-6" date="1641816000">- Type: adapt to new gmock
- ID: NA
- SUG: NA
- DESC: add gmock build requires</changelog>
  <changelog author="haozi007 &lt;liuhao27@huawei.com&gt; - 2.0.6-7" date="1641816001">- Type: sync patch from upstream
- ID: NA
- SUG: NA
- DESC: sync from openeuler</changelog>
  <changelog author="wangfengtu &lt;wangfengtu@huawei.com&gt; - 2.0.7-1" date="1645704000">- Type: enhancement
- ID: NA
- SUG: NA
- DESC: update to version v2.0.7</changelog>
  <changelog author="haozi007 &lt;liuhao27@huawei.com&gt; - 2.0.7-2" date="1654171200">- Type: enhancement
- ID: NA
- SUG: NA
- DESC: remove rpath by cmake</changelog>
  <changelog author="zhangxiaoyu &lt;zhangxiaoyu58@huawei.com&gt; - 2.0.7-3" date="1666094400">- Type: enhancement
- ID: NA
- SUG: NA
- DESC: add required package lcr lower and upper version</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 2.0.7-4" date="1667476800">- Type:feature
- CVE:NA
- SUG:NA
- DESC:Add sw64 architecture</changelog>
  <changelog author="wangrunze &lt;wangrunze13@huawei.com&gt; - 2.0.7-5" date="1671624000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: update lcr dependence version</changelog>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 2.0.7-6" date="1683892800">- Type: feature
- ID: NA
- SUG: NA
- DESC: Add loongarch64 architecture</changelog>
  <changelog author="jikai&lt;jikai11@huawei.com&gt; - 2.0.7-7" date="1694520000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix potential log error and empty pointer reference</changelog>
  <changelog author="jikai&lt;jikai11@huawei.com&gt; - 2.0.7-8" date="1695124800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:report low error of call cni plugin</changelog>
</package>
<package pkgid="c4d53d509e18cc7606246a523c8e794df53073ad982d40ddfe3f04de22ada231" name="cloud-init" arch="src">
  <version epoch="0" ver="21.4" rel="14.oe2203sp1"/>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 21.4-5" date="1669809600">- rename patch</changelog>
  <changelog author="xuxinyu &lt;xuxinyu@xfusion.com&gt; - 21.4-6" date="1671537600">- Type:security
- CVE:
- DESC:delete "ALL=(ALL) NOPASSWD:ALL" in cloud.cfg.tmpl</changelog>
  <changelog author="wanglimin&lt;wanglimin@xfusion.com&gt; - 21.4-7" date="1671624000">- make the same authentication behavior for arm and x86 machine</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 21.4-8" date="1672920000">- Limit permissions for /etc/network/50-cloud-init.yaml as read-only for root (600)</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 21.4-9" date="1673006400">- Fix the distro.osfamily output problem</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 21.4-10" date="1675339200">- revert make the same authentication behavior for arm and x86 machine</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 21.4-11" date="1679918400">- keep custom strict perms when 50-cloud-init.yaml exists</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 21.4-12" date="1681387200">- Don't change permissions of netrules target</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 21.4-13" date="1682251200">- Fix a unitest error</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 21.4-14" date="1684065600">- fix CVE-2022-2084</changelog>
</package>
<package pkgid="08909c0eb2974f3d690fb2c1fe7186b3be29248f97f9a22aa8000f1d11071886" name="cloud-init" arch="src">
  <version epoch="0" ver="21.4" rel="16.oe2203sp1"/>
  <changelog author="wanglimin&lt;wanglimin@xfusion.com&gt; - 21.4-7" date="1671624000">- make the same authentication behavior for arm and x86 machine</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 21.4-8" date="1672920000">- Limit permissions for /etc/network/50-cloud-init.yaml as read-only for root (600)</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 21.4-9" date="1673006400">- Fix the distro.osfamily output problem</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 21.4-10" date="1675339200">- revert make the same authentication behavior for arm and x86 machine</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 21.4-11" date="1679918400">- keep custom strict perms when 50-cloud-init.yaml exists</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 21.4-12" date="1681387200">- Don't change permissions of netrules target</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 21.4-13" date="1682251200">- Fix a unitest error</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 21.4-14" date="1684065600">- fix CVE-2022-2084</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 21.4-15" date="1684497600">- Cleanup ephemeral IP routes on exception and handle two different routes for the same ip</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 21.4-16" date="1684929600">- fix CVE-2023-1786</changelog>
</package>
<package pkgid="0bbadb4f869b04f414cb5cfd4563511be9eee854d802dc74fff4078042e08fe3" name="cloud-init" arch="src">
  <version epoch="0" ver="21.4" rel="24.oe2203sp1"/>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 21.4-15" date="1684497600">- Cleanup ephemeral IP routes on exception and handle two different routes for the same ip</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 21.4-16" date="1684929600">- fix CVE-2023-1786</changelog>
  <changelog author="Lv Ying &lt;lvying6@huawei.com&gt; - 21.4-17" date="1690632000">- backport upstream patches:
https://github.com/canonical/cloud-init/commit/fa53c7f4086f5937bc9bd328dba9f91ca73b6614
https://github.com/canonical/cloud-init/commit/9c7502a801763520639c66125eb373123d1e4f44
https://github.com/canonical/cloud-init/commit/2e17a0d626d41147b7d0822013e80179b3a81ee4
https://github.com/canonical/cloud-init/commit/9f0efc474ea430c75cd0abec3e2da719d4934346
https://github.com/canonical/cloud-init/commit/bb414c7866c4728b2105e84f7b426ab81cc4bf4d
https://github.com/canonical/cloud-init/commit/9cbd94dd57112083856ead0e0ff724e9d1c1f714
https://github.com/canonical/cloud-init/commit/6d817e94beb404d3917bf973bcb728aa6cc22ffe
https://github.com/canonical/cloud-init/commit/0450a1faff9e5095e6da0865916501772b3972e9</changelog>
  <changelog author="Lv Ying &lt;lvying6@huawei.com&gt; - 21.4-18" date="1690632001">- backport upstream patches:
https://github.com/canonical/cloud-init/commit/7136109df5a7b3c75dfb05a853fc4485fed25b5f
https://github.com/canonical/cloud-init/commit/f51c352e6c6a7d05a61308c188450a1b818eac45
https://github.com/canonical/cloud-init/commit/668a68fe577368555ea7f71577fc352494a98c25</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 21.4-19" date="1692360000">- backport upstream patches</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 21.4-20" date="1692619200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Do not generate dsa and ed25519 key types when crypto FIPS mode is enabled
       Don't fail if IB and Ethernet devices 'collide'
       Fix default route rendering on v2 ipv6
       Fix IPv6 netmask format for sysconfig
       Fix KeyError when rendering sysconfig IPv6 routes
       Fix network v2 metric rendering
       Ignore duplicate macs from mscc_felix and fsl_enetc
       macs: ignore duplicate MAC for devs with driver driver qmi_wwan
       net/dhcp: catch dhclient failures and raise NoDHCPLeaseError
       net: skip duplicate mac check for netvsc nic and its VF
       Set ownership for new folders in Write Files Module
       cc_ubuntu_advantage: Redact token from logs
       Do not silently ignore integer uid
       Ensure network ready before cloud-init service runs
       Fix exception when no activator found
       Fix KeyError in iproute pformat
       Handle non existent ca-cert-config situation</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 21.4-21" date="1695038400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:cc_mounts: Fix swapfile not working on btrfs
       cc_mounts: Use fallocate to create swapfile on btrfs
       collect-logs fix memory usage</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 21.4-22" date="1699358400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove test_net_freebsd</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 21.4-23" date="1699358401">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:do not generate dsa</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 21.4-24" date="1702555200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Don't loosen the permissions of the log file</changelog>
</package>
<package pkgid="2ee20d7b321113d46a0d0f97cf79fa83c25cc33fecc9c86e570ff350ab0fb676" name="cmake" arch="src">
  <version epoch="0" ver="3.22.0" rel="8.oe2203sp1"/>
  <changelog author="wangchen &lt;wangchen137@h-partners.com&gt; - 3.22.0-4" date="1646222400">- Remove rhash-devel from BuildRequires</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 3.22.0-5" date="1666180800">- add sw64 patch</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 3.22.0-6" date="1691668800">- fix sw_64 portmidi Could NOT find JNI</changelog>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 3.22.0-7" date="1702555200">- Fix abnormal empty link in cmake-data package</changelog>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 3.22.0-8" date="1706875200">- Remove Windows_TemporaryKey.pfx</changelog>
</package>
<package pkgid="f137da8d28c3baeea6650e3e25a4e7da202622282681412bb506be93205c8d6b" name="cockpit" arch="src">
  <version epoch="0" ver="178" rel="13.oe2203sp1"/>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 178-9" date="1622030400">- Add a BuildRequires for gcc</changelog>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 178-10" date="1626782400">- delete gdb in buildrequires</changelog>
  <changelog author="wangkerong &lt;wangkerong&gt; - 178-11" date="1632484800">- Type:CVE
- Id:CVE-2021-3660
- SUG:NA
- DESC:fix cve-2021-3660</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 178-12" date="1670932800">- strip binary file</changelog>
  <changelog author="zhangpan &lt;zhangpan@h-partners.com&gt; - 178-13" date="1673352000">- Type:NA
- Id:NA
- SUG:NA
- DESC:splits subpackages cockpit-machines cockpit-machines-ovirt</changelog>
</package>
<package pkgid="f209f404119ded0d9cb1ccf5078538d4c85a016a697bfddd4930a54a6f321738" name="cockpit" arch="src">
  <version epoch="0" ver="178" rel="14.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 178-12" date="1670932800">- strip binary file</changelog>
  <changelog author="zhangpan &lt;zhangpan@h-partners.com&gt; - 178-13" date="1673352000">- Type:NA
- Id:NA
- SUG:NA
- DESC:splits subpackages cockpit-machines cockpit-machines-ovirt</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 178-14" date="1714305600">- Type:CVE
- ID:CVE-2020-35850
- SUG:restart
- DESC:fix CVE-2020-35850</changelog>
</package>
<package pkgid="208c1fe84fde8cb7d1c4289275c3ac168b87bff47c770aa10f11d5c1d1ea93cf" name="cockpit" arch="src">
  <version epoch="0" ver="178" rel="15.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 178-12" date="1670932800">- strip binary file</changelog>
  <changelog author="zhangpan &lt;zhangpan@h-partners.com&gt; - 178-13" date="1673352000">- Type:NA
- Id:NA
- SUG:NA
- DESC:splits subpackages cockpit-machines cockpit-machines-ovirt</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 178-14" date="1714305600">- Type:CVE
- ID:CVE-2020-35850
- SUG:restart
- DESC:fix CVE-2020-35850</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 178-15" date="1716379200">- Type:NA
- ID:NA
- SUG:NA
- DESC:add more zh_CN translation for i18n</changelog>
</package>
<package pkgid="ae3de571bf6444bb3b1028eb4d82844ccce6a15aa795d916298e98230bea775c" name="cockpit" arch="src">
  <version epoch="0" ver="178" rel="17.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 178-12" date="1670932800">- strip binary file</changelog>
  <changelog author="zhangpan &lt;zhangpan@h-partners.com&gt; - 178-13" date="1673352000">- Type:NA
- Id:NA
- SUG:NA
- DESC:splits subpackages cockpit-machines cockpit-machines-ovirt</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 178-14" date="1714305600">- Type:CVE
- ID:CVE-2020-35850
- SUG:restart
- DESC:fix CVE-2020-35850</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 178-15" date="1716379200">- Type:NA
- ID:NA
- SUG:NA
- DESC:add more zh_CN translation for i18n</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 178-16" date="1720094400">- Type:CVE
- ID:CVE-2024-6126
- SUG:restart
- DESC:fix CVE-2024-6126</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 178-17" date="1720094401">- fix CVE-2024-6126 patch name</changelog>
</package>
<package pkgid="f2416d6cd25fcea6c614471d173c7b5f01867514d940c3fc2e2a20e43f19bc30" name="containerd" arch="src">
  <version epoch="0" ver="1.2.0" rel="309.oe2203sp1"/>
  <changelog author="songyanting&lt;songyanting@huawei.com&gt; - 1.2.0-300" date="1642852800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:sync bugfix, include
       1. add check in spec
       2. kill container init process if runc start returns error
       3. fix containerd-shim residual when kill containerd durin
       4. fix deadlock on commit error
       5. backport upstream &amp; ttrpc patches
       6. fix exec event missing due to pid reuse
       7. fix dm left when pause container and kill shim
       8. add CGO security build options
       9. fix start container failed with id exists
      10. drop opt package
      11. fix race access for mobySubscribed
      12. improve log for debugging
      13. reduce permission for bundle dir
      14. fix publish command wait block forever</changelog>
  <changelog author="Vanient&lt;xiadanni1@huawei.com&gt; - 1.2.0-301" date="1652184000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Use fs.RootPath when mounting volumes for bundle dir to fix CVE-2022-23648</changelog>
  <changelog author="zhangsong234&lt;zhangsong34@huawei.com&gt; - 1.2.0-302" date="1655899200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:put get pid lock after set process exited to avoid deadlock</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.2.0-303" date="1656936000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: Limit the response size of ExecSync to fix CVE-2022-31030</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.2.0-304" date="1663848000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: bugfix and add CGO security build option</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.2.0-305" date="1668600000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: fix version number wrong</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.2.0-306" date="1668600001">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: add ctr binary into package</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.2.0-307" date="1670932800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: Fix goroutine leak in Exec</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.2.0-308" date="1671192000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix k8s build fail without import context</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.2.0-309" date="1677499200">- Type:CVE
- ID:NA
- SUG:NA
- DESC:fix CVE-2023-25153 and CVE-2023-25173</changelog>
</package>
<package pkgid="ce990a5840b9978dd269d5d31c207a15844d7b775b8919d397d4538092f4f860" name="containerd" arch="src">
  <version epoch="0" ver="1.2.0" rel="316.oe2203sp1"/>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.2.0-307" date="1670932800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: Fix goroutine leak in Exec</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.2.0-308" date="1671192000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix k8s build fail without import context</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.2.0-309" date="1677499200">- Type:CVE
- ID:NA
- SUG:NA
- DESC:fix CVE-2023-25153 and CVE-2023-25173</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@kylinsec.com.cn&gt; - 1.2.0-310" date="1681819200">- Sync 2203 loongarch support for containerd patch file</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.2.0-311" date="1687003200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix journald stop container shim log stuck bug</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 1.2.0-312" date="1691668800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add sw_64 support</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.2.0-313" date="1695124800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:sync some patches</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.2.0-314" date="1699444800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:bump ttrpc to fix containerd-shim socket connect increase leak after restart docker</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.2.0-315" date="1703160000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:sync some patches</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.2.0-316" date="1706616000">- Type:CVE
- ID:NA
- SUG:NA
- DESC:fix CVE-2023-39325</changelog>
</package>
<package pkgid="bc4486221bdc16388dbe7ed0410b4ead2fd167b727e2b48a616af80511ebe145" name="containerd" arch="src">
  <version epoch="0" ver="1.2.0" rel="317.oe2203sp1"/>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.2.0-308" date="1671192000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix k8s build fail without import context</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.2.0-309" date="1677499200">- Type:CVE
- ID:NA
- SUG:NA
- DESC:fix CVE-2023-25153 and CVE-2023-25173</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@kylinsec.com.cn&gt; - 1.2.0-310" date="1681819200">- Sync 2203 loongarch support for containerd patch file</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.2.0-311" date="1687003200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix journald stop container shim log stuck bug</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 1.2.0-312" date="1691668800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add sw_64 support</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.2.0-313" date="1695124800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:sync some patches</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.2.0-314" date="1699444800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:bump ttrpc to fix containerd-shim socket connect increase leak after restart docker</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.2.0-315" date="1703160000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:sync some patches</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.2.0-316" date="1706616000">- Type:CVE
- ID:NA
- SUG:NA
- DESC:fix CVE-2023-39325</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.2.0-317" date="1707220800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:update vendored golang.org/x/net</changelog>
</package>
<package pkgid="7609843372a907f189871e34be5d9750af5bd69a5dff5e3ea22ec92b88a4c32b" name="containernetworking-plugins" arch="src">
  <version epoch="0" ver="1.1.1" rel="4.oe2203sp1"/>
  <changelog author="liyanan &lt;liyanan32@huawei.com&gt; - 1.0.1-2" date="1641816000">- drop deps for golang packages due to vendor has everything</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 1.1.1-1" date="1658318400">- update to version 1.1.1</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1.1.1-2" date="1675944000">- Add PIE,BIND_NOW,RELRO,STRIP secure compilation options</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 1.1.1-3" date="1691668800">- Type:sync
- ID:NA
- SUG:NA
- DESC: Add support for sw_64 and loongarch64.</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1.1.1-4" date="1703764800">- Rebuild for golang cves: CVE-2023-24534,CVE-2023-24536,CVE-2023-24537 and CVE-2023-24538</changelog>
</package>
<package pkgid="584955414d38e92eeeb5cb769e34fbe0ce1453461137811da7bb15288def6928" name="cpio" arch="src">
  <version epoch="0" ver="2.13" rel="10.oe2203sp1"/>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 2.13-7" date="1666872000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Rebuild for next release</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.13-8" date="1685188800">- Type:CVE
- ID:CVE-2015-1197
- SUG:NA
- DESC:Fix CVE-2015-1197</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.13-9" date="1687262400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:revert fix CVE-2015-1197 because it causes AT testcases problems</changelog>
  <changelog author="chenziyang &lt;chenziyang4@huawei.com&gt; - 2.13-10" date="1693396800">- Type:CVE
- ID:CVE-2015-1197
- SUG:NA
- DESC:backport CVE-2015-1197, delete revert-CVE-2015-1197.patch and backport the following 2 bugfix patches</changelog>
</package>
<package pkgid="36453fe42e34eb35a20cb3f3fb08c51fa4e8f587e72e15b79538cd156a813b32" name="cpio" arch="src">
  <version epoch="0" ver="2.13" rel="8.oe2203sp1"/>
  <changelog author="fuanan &lt;fuanan3@huawei.com&gt; - 2.13-4" date="1622808000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add 'autoconf automake' to BuildRequires to use autoreconf command</changelog>
  <changelog author="yixiangzhike &lt;zhangxingliang3@huawei.com&gt; - 2.13-5" date="1627646400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Solve mutiple definition compilation error</changelog>
  <changelog author="yangzhuangzhuang &lt;yangzhuangzhuang1@huawei.com&gt; - 2.13-6" date="1629806400">- Type:CVE
- ID:CVE-2021-38185
- SUG:NA
- DESC:Fix CVE-2021-38185</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 2.13-7" date="1666872000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Rebuild for next release</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.13-8" date="1685188800">- Type:CVE
- ID:CVE-2015-1197
- SUG:NA
- DESC:Fix CVE-2015-1197</changelog>
</package>
<package pkgid="866401635fa08a08c480dfb493473b293c9e10fff8688453a0fe008a42043914" name="cpp-httplib" arch="src">
  <version epoch="0" ver="0.12.4" rel="1.oe2203sp1"/>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 0.12.4-1" date="1686657600">- Update to 0.12.4 for fix CVE-2023-26130</changelog>
</package>
<package pkgid="2d6d7c97f296c5b505fe0a08139c5effbced492bc2ef3b7cb25edba63f7a8dfb" name="crash" arch="src">
  <version epoch="0" ver="8.0.2" rel="1.oe2203sp1"/>
  <changelog author="wangbin &lt;wangbin224@huawei.com&gt; - 7.2.9-5" date="1630670400">- fix null pointer reference when CONFIG_KASAN is open</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@huawei.com&gt; - 7.3.0-1" date="1640347200">- Upgrade version to 7.3.0</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@huawei.com&gt; - 7.3.0-2" date="1640865600">- fix seek error "IRQ stack pointer"</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@huawei.com&gt; - 7.3.0-3" date="1640952000">- add SDEI stack resolution</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 7.3.0-4" date="1644321600">- fix null pointer reference when CONFIG_KASAN is open</changelog>
  <changelog author="wangbin &lt;wangbin224@huawei.com&gt; - 7.3.0-5" date="1645617600">- Handle task_struct cpu member changes for kernels &gt;= 5.16-rc1
  and delete use_system_readline_v3.patch</changelog>
  <changelog author="chenhaixiang &lt;chenhaixiang3@huawei.com&gt; - 7.3.0-6" date="1665316800">- fix gdb CVE-2019-1010180</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 7.3.0-7" date="1666180800">- add sw64 patch</changelog>
  <changelog author="Ding Hui &lt;dinghui@sangfor.com.cn&gt; - 7.3.0-8" date="1669896000">- fix backtraces of arm64 KASAN kernel dumpfile truncated</changelog>
  <changelog author="chenhaixiang &lt;chenhaixiang3@huawei.com&gt; - 8.0.2-1" date="1690286400">- Update from master</changelog>
</package>
<package pkgid="cf4e6442a23787a55b6a3383f493122d0f52bfdc1657778b965f1486c9a05075" name="cups" arch="src">
  <version epoch="1" ver="2.4.0" rel="10.oe2203sp1"/>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 2.4.0-1" date="1639051200">- DESC:update to cups-2.4.0</changelog>
  <changelog author="zhanzhimin &lt;zhanzhimin@h-partners.com&gt; - 2.4.0-2" date="1652356800">- fix official website address</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-3" date="1654776000">- fix CVE-2022-26691</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-4" date="1655294400">- Remove legacy code for RIP_MAX_CACHE environment variable</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.4.0-5" date="1676980800">- fix update conflict of devel and help</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-6" date="1685793600">- fix CVE-2023-32324</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-7" date="1686312000">- fix build error</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-8" date="1687780800">- fix CVE-2023-34241</changelog>
  <changelog author="haomimi &lt;haomimi@uniontech.com&gt; - 1:2.4.0-9" date="1689768000">- DESC:The license is changed to apache 2.0</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1:2.4.0-10" date="1695384000">- fix CVE-2023-4504</changelog>
</package>
<package pkgid="e2487af91dbae4794f0e6c7a4d6d154b5cae943e98cf33d9eb42a0887ef215e9" name="cups" arch="src">
  <version epoch="1" ver="2.4.0" rel="11.oe2203sp1"/>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-4" date="1655294400">- Remove legacy code for RIP_MAX_CACHE environment variable</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.4.0-5" date="1676980800">- fix update conflict of devel and help</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-6" date="1685793600">- fix CVE-2023-32324</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-7" date="1686312000">- fix build error</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-8" date="1687780800">- fix CVE-2023-34241</changelog>
  <changelog author="haomimi &lt;haomimi@uniontech.com&gt; - 1:2.4.0-9" date="1689768000">- DESC:The license is changed to apache 2.0</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1:2.4.0-10" date="1695384000">- fix CVE-2023-4504</changelog>
  <changelog author="baiguo &lt;baiguo@kylinos.cn&gt; - 1:2.4.0-11" date="1718193600">- fix CVE-2024-35235</changelog>
</package>
<package pkgid="378a10daeb4c5bf5221856526070ddb84af2f65e0898013ff00878d085dddf61" name="cups" arch="src">
  <version epoch="1" ver="2.4.0" rel="12.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.4.0-5" date="1676980800">- fix update conflict of devel and help</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-6" date="1685793600">- fix CVE-2023-32324</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-7" date="1686312000">- fix build error</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-8" date="1687780800">- fix CVE-2023-34241</changelog>
  <changelog author="haomimi &lt;haomimi@uniontech.com&gt; - 1:2.4.0-9" date="1689768000">- DESC:The license is changed to apache 2.0</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1:2.4.0-10" date="1695384000">- fix CVE-2023-4504</changelog>
  <changelog author="baiguo &lt;baiguo@kylinos.cn&gt; - 1:2.4.0-11" date="1718193600">- fix CVE-2024-35235</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:2.4.0-12" date="1723636800">- Fix regression of fixing CVE-2024-35235 (upstream issue#985)</changelog>
</package>
<package pkgid="f6ed4f312db4fa0084c2ceb8310a528ee773c00ea46159e837f4bd506529cada" name="cups" arch="src">
  <version epoch="1" ver="2.4.0" rel="5.oe2203sp1"/>
  <changelog author="liuyumeng &lt;liuyumeng@huawei.com&gt; - 2.3.3-4" date="1621857600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Compilation optimization</changelog>
  <changelog author="liuyumeng &lt;liuyumeng@huawei.com&gt; - 2.3.3-5" date="1621944000">- remove unused ncp backend</changelog>
  <changelog author="wangkerong &lt;wangkeorng@huawei.com&gt; - 2.3.3-6" date="1623153600">- Type:CVE
- ID:CVE-2021-25317
- SUG:NA
- DESC:Fix CVE-2021-25317</changelog>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 2.3.3-7" date="1632484800">- Type:CVE
- ID:CVE-2020-10001
- SUG:NA
- DESC:Fix CVE-2020-10001</changelog>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 2.3.3-8" date="1636027200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix cups-devel requires error</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 2.4.0-1" date="1639051200">- DESC:update to cups-2.4.0</changelog>
  <changelog author="zhanzhimin &lt;zhanzhimin@h-partners.com&gt; - 2.4.0-2" date="1652356800">- fix official website address</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-3" date="1654776000">- fix CVE-2022-26691</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-4" date="1655294400">- Remove legacy code for RIP_MAX_CACHE environment variable</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.4.0-5" date="1676980800">- fix update conflict of devel and help</changelog>
</package>
<package pkgid="a28ac3485ec44b6d7920b58c4866f54da48625a173b937a06415f97fa31536c5" name="cups" arch="src">
  <version epoch="1" ver="2.4.0" rel="7.oe2203sp1"/>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 2.3.3-7" date="1632484800">- Type:CVE
- ID:CVE-2020-10001
- SUG:NA
- DESC:Fix CVE-2020-10001</changelog>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 2.3.3-8" date="1636027200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix cups-devel requires error</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 2.4.0-1" date="1639051200">- DESC:update to cups-2.4.0</changelog>
  <changelog author="zhanzhimin &lt;zhanzhimin@h-partners.com&gt; - 2.4.0-2" date="1652356800">- fix official website address</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-3" date="1654776000">- fix CVE-2022-26691</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-4" date="1655294400">- Remove legacy code for RIP_MAX_CACHE environment variable</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.4.0-5" date="1676980800">- fix update conflict of devel and help</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-6" date="1685793600">- fix CVE-2023-32324</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-7" date="1686312000">- fix build error</changelog>
</package>
<package pkgid="615beed12ac62e1a3e7a8097936d70ace8e481c709abc0e3e6a736f05622f028" name="cups" arch="src">
  <version epoch="1" ver="2.4.0" rel="8.oe2203sp1"/>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 2.3.3-7" date="1632484800">- Type:CVE
- ID:CVE-2020-10001
- SUG:NA
- DESC:Fix CVE-2020-10001</changelog>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 2.3.3-8" date="1636027200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix cups-devel requires error</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 2.4.0-1" date="1639051200">- DESC:update to cups-2.4.0</changelog>
  <changelog author="zhanzhimin &lt;zhanzhimin@h-partners.com&gt; - 2.4.0-2" date="1652356800">- fix official website address</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-3" date="1654776000">- fix CVE-2022-26691</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-4" date="1655294400">- Remove legacy code for RIP_MAX_CACHE environment variable</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.4.0-5" date="1676980800">- fix update conflict of devel and help</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-6" date="1685793600">- fix CVE-2023-32324</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-7" date="1686312000">- fix build error</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-8" date="1687780800">- fix CVE-2023-34241</changelog>
</package>
<package pkgid="e34e54f8b72a7bffe89aecf704af9a9c7cde45f9129ee196c59fb2a1e9afd500" name="cups-filters" arch="src">
  <version epoch="0" ver="1.28.9" rel="3.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1.28.9-3" date="1685102400">- fix CVE-2023-24805</changelog>
</package>
<package pkgid="4de93b58bcb39dfa65b8292cc729f6eb5fc213d1045d445c0a9e0eac124ede6d" name="curl" arch="src">
  <version epoch="0" ver="7.79.1" rel="14.oe2203sp1"/>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-5" date="1651838400">- Type:cves
- CVE:CVE-2022-22576 CVE-2022-27774 CVE-2022-27775 CVE-2022-27776
- SUG:NA
- DESC:fix CVE-2022-22576 CVE-2022-27774 CVE-2022-27775 CVE-2022-27776</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-6" date="1652788800">- Type:cves
- CVE:CVE-2022-27781 CVE-2022-27782
- SUG:NA
- DESC:fix CVE-2022-27781 CVE-2022-27782</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-7" date="1656504000">- Type:cves
- CVE:CVE-2022-32205 CVE-2022-32206 CVE-2022-32207 CVE-2022-32208
- SUG:NA
- DESC:fix CVE-2022-32205 CVE-2022-32206 CVE-2022-32207 CVE-2022-32208</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-8" date="1657022400">- Type:cves
- CVE:CVE-2022-32207
- SUG:NA
- DESC:fix CVE-2022-32207 better</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-9" date="1658750400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix build error when add --disable-http-auth configure option</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-10" date="1662033600">- Type:cves
- CVE:CVE-2022-35252
- SUG:NA
- DESC:fix CVE-2022-35252</changelog>
  <changelog author="huangduirong &lt;huangduirong@huawei.com&gt; - 7.79.1-11" date="1665489600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Move autoreconf to build</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 7.79.1-12" date="1666872000">- Type:cves
- CVE:CVE-2022-32221 CVE-2022-42915 CVE-2022-42916
- SUG:NA
- DESC:fix CVE-2022-32221 CVE-2022-42915 CVE-2022-42916</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-13" date="1671710400">- Type:cves
- CVE:CVE-2022-43551 CVE-2022-43552
- SUG:NA
- DESC:fix CVE-2022-43551 CVE-2022-43552</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 7.79.1-14" date="1676721600">- Type:cves
- CVE:CVE-2023-23914 CVE-2023-23915 CVE-2023-23916
- SUG:NA
- DESC:fix CVE-2023-23914 CVE-2023-23915 CVE-2023-23916</changelog>
</package>
<package pkgid="6d2ec2d5772eba4a94e5842b545a6739f9bc50e524d5714c7a2abe1eb73df5dc" name="curl" arch="src">
  <version epoch="0" ver="7.79.1" rel="15.oe2203sp1"/>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-6" date="1652788800">- Type:cves
- CVE:CVE-2022-27781 CVE-2022-27782
- SUG:NA
- DESC:fix CVE-2022-27781 CVE-2022-27782</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-7" date="1656504000">- Type:cves
- CVE:CVE-2022-32205 CVE-2022-32206 CVE-2022-32207 CVE-2022-32208
- SUG:NA
- DESC:fix CVE-2022-32205 CVE-2022-32206 CVE-2022-32207 CVE-2022-32208</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-8" date="1657022400">- Type:cves
- CVE:CVE-2022-32207
- SUG:NA
- DESC:fix CVE-2022-32207 better</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-9" date="1658750400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix build error when add --disable-http-auth configure option</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-10" date="1662033600">- Type:cves
- CVE:CVE-2022-35252
- SUG:NA
- DESC:fix CVE-2022-35252</changelog>
  <changelog author="huangduirong &lt;huangduirong@huawei.com&gt; - 7.79.1-11" date="1665489600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Move autoreconf to build</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 7.79.1-12" date="1666872000">- Type:cves
- CVE:CVE-2022-32221 CVE-2022-42915 CVE-2022-42916
- SUG:NA
- DESC:fix CVE-2022-32221 CVE-2022-42915 CVE-2022-42916</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-13" date="1671710400">- Type:cves
- CVE:CVE-2022-43551 CVE-2022-43552
- SUG:NA
- DESC:fix CVE-2022-43551 CVE-2022-43552</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 7.79.1-14" date="1676721600">- Type:cves
- CVE:CVE-2023-23914 CVE-2023-23915 CVE-2023-23916
- SUG:NA
- DESC:fix CVE-2023-23914 CVE-2023-23915 CVE-2023-23916</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-15" date="1679486400">- Type:cves
- CVE:CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538
- SUG:NA
- DESC:fix CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538</changelog>
</package>
<package pkgid="9db3b90495912aa3fe2366646b57bf7d2a05412dd7e33c5d839a24c0d8e2ff6b" name="curl" arch="src">
  <version epoch="0" ver="7.79.1" rel="16.oe2203sp1"/>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-7" date="1656504000">- Type:cves
- CVE:CVE-2022-32205 CVE-2022-32206 CVE-2022-32207 CVE-2022-32208
- SUG:NA
- DESC:fix CVE-2022-32205 CVE-2022-32206 CVE-2022-32207 CVE-2022-32208</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-8" date="1657022400">- Type:cves
- CVE:CVE-2022-32207
- SUG:NA
- DESC:fix CVE-2022-32207 better</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-9" date="1658750400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix build error when add --disable-http-auth configure option</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-10" date="1662033600">- Type:cves
- CVE:CVE-2022-35252
- SUG:NA
- DESC:fix CVE-2022-35252</changelog>
  <changelog author="huangduirong &lt;huangduirong@huawei.com&gt; - 7.79.1-11" date="1665489600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Move autoreconf to build</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 7.79.1-12" date="1666872000">- Type:cves
- CVE:CVE-2022-32221 CVE-2022-42915 CVE-2022-42916
- SUG:NA
- DESC:fix CVE-2022-32221 CVE-2022-42915 CVE-2022-42916</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-13" date="1671710400">- Type:cves
- CVE:CVE-2022-43551 CVE-2022-43552
- SUG:NA
- DESC:fix CVE-2022-43551 CVE-2022-43552</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 7.79.1-14" date="1676721600">- Type:cves
- CVE:CVE-2023-23914 CVE-2023-23915 CVE-2023-23916
- SUG:NA
- DESC:fix CVE-2023-23914 CVE-2023-23915 CVE-2023-23916</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-15" date="1679486400">- Type:cves
- CVE:CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538
- SUG:NA
- DESC:fix CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-16" date="1681905600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport to fix build error when user don't use glibc</changelog>
</package>
<package pkgid="246bd2b73bb685add7333166ab74f9371ebdcf464a7b43a89d6048c2040f5cde" name="curl" arch="src">
  <version epoch="0" ver="7.79.1" rel="17.oe2203sp1"/>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-8" date="1657022400">- Type:cves
- CVE:CVE-2022-32207
- SUG:NA
- DESC:fix CVE-2022-32207 better</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-9" date="1658750400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix build error when add --disable-http-auth configure option</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-10" date="1662033600">- Type:cves
- CVE:CVE-2022-35252
- SUG:NA
- DESC:fix CVE-2022-35252</changelog>
  <changelog author="huangduirong &lt;huangduirong@huawei.com&gt; - 7.79.1-11" date="1665489600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Move autoreconf to build</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 7.79.1-12" date="1666872000">- Type:cves
- CVE:CVE-2022-32221 CVE-2022-42915 CVE-2022-42916
- SUG:NA
- DESC:fix CVE-2022-32221 CVE-2022-42915 CVE-2022-42916</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-13" date="1671710400">- Type:cves
- CVE:CVE-2022-43551 CVE-2022-43552
- SUG:NA
- DESC:fix CVE-2022-43551 CVE-2022-43552</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 7.79.1-14" date="1676721600">- Type:cves
- CVE:CVE-2023-23914 CVE-2023-23915 CVE-2023-23916
- SUG:NA
- DESC:fix CVE-2023-23914 CVE-2023-23915 CVE-2023-23916</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-15" date="1679486400">- Type:cves
- CVE:CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538
- SUG:NA
- DESC:fix CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-16" date="1681905600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport to fix build error when user don't use glibc</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-17" date="1684929600">- Type:CVE
- CVE:CVE-2023-28321,CVE-2023-28322
- SUG:NA
- DESC:fix CVE-2023-28321,CVE-2023-28322</changelog>
</package>
<package pkgid="22a254027e752f95781e852f84db256cf2925d25164de66c42407babb59671af" name="curl" arch="src">
  <version epoch="0" ver="7.79.1" rel="19.oe2203sp1"/>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-10" date="1662033600">- Type:cves
- CVE:CVE-2022-35252
- SUG:NA
- DESC:fix CVE-2022-35252</changelog>
  <changelog author="huangduirong &lt;huangduirong@huawei.com&gt; - 7.79.1-11" date="1665489600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Move autoreconf to build</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 7.79.1-12" date="1666872000">- Type:cves
- CVE:CVE-2022-32221 CVE-2022-42915 CVE-2022-42916
- SUG:NA
- DESC:fix CVE-2022-32221 CVE-2022-42915 CVE-2022-42916</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-13" date="1671710400">- Type:cves
- CVE:CVE-2022-43551 CVE-2022-43552
- SUG:NA
- DESC:fix CVE-2022-43551 CVE-2022-43552</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 7.79.1-14" date="1676721600">- Type:cves
- CVE:CVE-2023-23914 CVE-2023-23915 CVE-2023-23916
- SUG:NA
- DESC:fix CVE-2023-23914 CVE-2023-23915 CVE-2023-23916</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-15" date="1679486400">- Type:cves
- CVE:CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538
- SUG:NA
- DESC:fix CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-16" date="1681905600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport to fix build error when user don't use glibc</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-17" date="1684929600">- Type:CVE
- CVE:CVE-2023-28321,CVE-2023-28322
- SUG:NA
- DESC:fix CVE-2023-28321,CVE-2023-28322</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-18" date="1686225600">- Type:CVE
- CVE:CVE-2023-28320
- SUG:NA
- DESC:fix CVE-2023-28320</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-19" date="1686398400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disable valgrind in tests</changelog>
</package>
<package pkgid="aa774a11007085743be0f5445bbdf89f51efcc3ea60aa89a4fd86ab1ed3fa774" name="curl" arch="src">
  <version epoch="0" ver="7.79.1" rel="20.oe2203sp1"/>
  <changelog author="huangduirong &lt;huangduirong@huawei.com&gt; - 7.79.1-11" date="1665489600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Move autoreconf to build</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 7.79.1-12" date="1666872000">- Type:cves
- CVE:CVE-2022-32221 CVE-2022-42915 CVE-2022-42916
- SUG:NA
- DESC:fix CVE-2022-32221 CVE-2022-42915 CVE-2022-42916</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-13" date="1671710400">- Type:cves
- CVE:CVE-2022-43551 CVE-2022-43552
- SUG:NA
- DESC:fix CVE-2022-43551 CVE-2022-43552</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 7.79.1-14" date="1676721600">- Type:cves
- CVE:CVE-2023-23914 CVE-2023-23915 CVE-2023-23916
- SUG:NA
- DESC:fix CVE-2023-23914 CVE-2023-23915 CVE-2023-23916</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-15" date="1679486400">- Type:cves
- CVE:CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538
- SUG:NA
- DESC:fix CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-16" date="1681905600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport to fix build error when user don't use glibc</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-17" date="1684929600">- Type:CVE
- CVE:CVE-2023-28321,CVE-2023-28322
- SUG:NA
- DESC:fix CVE-2023-28321,CVE-2023-28322</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-18" date="1686225600">- Type:CVE
- CVE:CVE-2023-28320
- SUG:NA
- DESC:fix CVE-2023-28320</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-19" date="1686398400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disable valgrind in tests</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-20" date="1687176000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:hide sensitive info in cmdline when ps</changelog>
</package>
<package pkgid="41d935f42297c5d7f44b6f496a167817f2ab6cbfdc4751271c522be28a3e89eb" name="curl" arch="src">
  <version epoch="0" ver="7.79.1" rel="23.oe2203sp1"/>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 7.79.1-14" date="1676721600">- Type:cves
- CVE:CVE-2023-23914 CVE-2023-23915 CVE-2023-23916
- SUG:NA
- DESC:fix CVE-2023-23914 CVE-2023-23915 CVE-2023-23916</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-15" date="1679486400">- Type:cves
- CVE:CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538
- SUG:NA
- DESC:fix CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-16" date="1681905600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport to fix build error when user don't use glibc</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-17" date="1684929600">- Type:CVE
- CVE:CVE-2023-28321,CVE-2023-28322
- SUG:NA
- DESC:fix CVE-2023-28321,CVE-2023-28322</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-18" date="1686225600">- Type:CVE
- CVE:CVE-2023-28320
- SUG:NA
- DESC:fix CVE-2023-28320</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-19" date="1686398400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disable valgrind in tests</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-20" date="1687176000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:hide sensitive info in cmdline when ps</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-21" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix double-free when using https with tunneling proxy</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-22" date="1688990400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport some testcases</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-23" date="1689854400">- Type:CVE
- CVE:CVE-2023-32001
- SUG:NA
- DESC:fix CVE-2023-32001</changelog>
</package>
<package pkgid="e799556d77d5d080ffce9f46faef375e531126f13a16716fd0a9d28c7990d966" name="curl" arch="src">
  <version epoch="0" ver="7.79.1" rel="24.oe2203sp1"/>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-15" date="1679486400">- Type:cves
- CVE:CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538
- SUG:NA
- DESC:fix CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-16" date="1681905600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport to fix build error when user don't use glibc</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-17" date="1684929600">- Type:CVE
- CVE:CVE-2023-28321,CVE-2023-28322
- SUG:NA
- DESC:fix CVE-2023-28321,CVE-2023-28322</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-18" date="1686225600">- Type:CVE
- CVE:CVE-2023-28320
- SUG:NA
- DESC:fix CVE-2023-28320</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-19" date="1686398400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disable valgrind in tests</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-20" date="1687176000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:hide sensitive info in cmdline when ps</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-21" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix double-free when using https with tunneling proxy</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-22" date="1688990400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport some testcases</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-23" date="1689854400">- Type:CVE
- CVE:CVE-2023-32001
- SUG:NA
- DESC:fix CVE-2023-32001</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 7.79.1-24" date="1697025600">- Type:CVE
- CVE:CVE-2023-38545, CVE-2023-38546
- SUG:NA
- DESC:fix CVE-2023-38545, CVE-2023-38546</changelog>
</package>
<package pkgid="69fccf6d52676d1f06aa24e571965cccb0ed032d98b507188cf24096c4cc3eaf" name="curl" arch="src">
  <version epoch="0" ver="7.79.1" rel="25.oe2203sp1"/>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-16" date="1681905600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport to fix build error when user don't use glibc</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-17" date="1684929600">- Type:CVE
- CVE:CVE-2023-28321,CVE-2023-28322
- SUG:NA
- DESC:fix CVE-2023-28321,CVE-2023-28322</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-18" date="1686225600">- Type:CVE
- CVE:CVE-2023-28320
- SUG:NA
- DESC:fix CVE-2023-28320</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-19" date="1686398400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disable valgrind in tests</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-20" date="1687176000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:hide sensitive info in cmdline when ps</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-21" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix double-free when using https with tunneling proxy</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-22" date="1688990400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport some testcases</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-23" date="1689854400">- Type:CVE
- CVE:CVE-2023-32001
- SUG:NA
- DESC:fix CVE-2023-32001</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 7.79.1-24" date="1697025600">- Type:CVE
- CVE:CVE-2023-38545, CVE-2023-38546
- SUG:NA
- DESC:fix CVE-2023-38545, CVE-2023-38546</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-25" date="1702036800">- Type:CVE
- CVE:CVE-2023-46218 CVE-2023-46219
- SUG:NA
- DESC:fix CVE-2023-46218 CVE-2023-46219</changelog>
</package>
<package pkgid="691eeb3895442130ed237f0a8268a2f6a0694620b3d1d59adf2816b04b62e01b" name="curl" arch="src">
  <version epoch="0" ver="7.79.1" rel="27.oe2203sp1"/>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-18" date="1686225600">- Type:CVE
- CVE:CVE-2023-28320
- SUG:NA
- DESC:fix CVE-2023-28320</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-19" date="1686398400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disable valgrind in tests</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-20" date="1687176000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:hide sensitive info in cmdline when ps</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-21" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix double-free when using https with tunneling proxy</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-22" date="1688990400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport some testcases</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-23" date="1689854400">- Type:CVE
- CVE:CVE-2023-32001
- SUG:NA
- DESC:fix CVE-2023-32001</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 7.79.1-24" date="1697025600">- Type:CVE
- CVE:CVE-2023-38545, CVE-2023-38546
- SUG:NA
- DESC:fix CVE-2023-38545, CVE-2023-38546</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-25" date="1702036800">- Type:CVE
- CVE:CVE-2023-46218 CVE-2023-46219
- SUG:NA
- DESC:fix CVE-2023-46218 CVE-2023-46219</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-26" date="1704283200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:tool_progress: avoid division by zero in parallel progress
       digest: pass over leading spaces in qop values
       Curl_close: call Curl_resolver_cancel to avoid memory-leak
       easy: fix the altsvc init for curl_easy_duphandle
       libssh: if sftp_init fails, don't get the sftp error code
       url: move back the IDN conversion of proxy names
       ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
       http: fix the ::1 comparison for IPv6 localhost for cookies
       multi: free up more data earleier in DONE
       curl_path: bring back support for SFTP path ending in /~
       transfer: refuse POSTFIELDS + RESUME_FROM combo
       tool_operate: refuse (--data or --form) and --continue-at
       http: free the url before storing a new copy
       url: fix null dispname for --connect-to option
       vtls: avoid memory leak if sha256 call fails
       urlapi: make sure zoneid is also duplicated in curl_url_dup</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-27" date="1704456000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:transfer: also stop the sending on closed connection
       openssl: avoid BN_num_bits() NULL pointer derefs</changelog>
</package>
<package pkgid="43ed0a5888824dd8bb422caa96c3d718752fa66bb2e7c82ea53fcacbdf496fc4" name="curl" arch="src">
  <version epoch="0" ver="7.79.1" rel="28.oe2203sp1"/>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-19" date="1686398400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disable valgrind in tests</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-20" date="1687176000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:hide sensitive info in cmdline when ps</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-21" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix double-free when using https with tunneling proxy</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-22" date="1688990400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport some testcases</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-23" date="1689854400">- Type:CVE
- CVE:CVE-2023-32001
- SUG:NA
- DESC:fix CVE-2023-32001</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 7.79.1-24" date="1697025600">- Type:CVE
- CVE:CVE-2023-38545, CVE-2023-38546
- SUG:NA
- DESC:fix CVE-2023-38545, CVE-2023-38546</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-25" date="1702036800">- Type:CVE
- CVE:CVE-2023-46218 CVE-2023-46219
- SUG:NA
- DESC:fix CVE-2023-46218 CVE-2023-46219</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-26" date="1704283200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:tool_progress: avoid division by zero in parallel progress
       digest: pass over leading spaces in qop values
       Curl_close: call Curl_resolver_cancel to avoid memory-leak
       easy: fix the altsvc init for curl_easy_duphandle
       libssh: if sftp_init fails, don't get the sftp error code
       url: move back the IDN conversion of proxy names
       ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
       http: fix the ::1 comparison for IPv6 localhost for cookies
       multi: free up more data earleier in DONE
       curl_path: bring back support for SFTP path ending in /~
       transfer: refuse POSTFIELDS + RESUME_FROM combo
       tool_operate: refuse (--data or --form) and --continue-at
       http: free the url before storing a new copy
       url: fix null dispname for --connect-to option
       vtls: avoid memory leak if sha256 call fails
       urlapi: make sure zoneid is also duplicated in curl_url_dup</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-27" date="1704456000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:transfer: also stop the sending on closed connection
       openssl: avoid BN_num_bits() NULL pointer derefs</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-28" date="1711713600">- Type:CVE
- CVE:CVE-2024-2398
- SUG:NA
- DESC:fix CVE-2024-2398</changelog>
</package>
<package pkgid="2294592695e8370113def65aa5aba6e1b93ce8479c89b1397bc2046844118334" name="dbus" arch="src">
  <version epoch="1" ver="1.12.20" rel="9.oe2203sp1"/>
  <changelog author="yangmingtai &lt;yangmingtai@huawei.com&gt; - 1:1.12.20-4" date="1626955200">- remove build requires of gdb</changelog>
  <changelog author="xuxiaozhou &lt;xuxiaozhou1@huawei.com&gt; - 1:1.12.20-5" date="1638273600">- add print-load-average-when-activate-service-timeout.patch for more debug information</changelog>
  <changelog author="licunlong &lt;licunlong1@huawei.com&gt; - 1:1.12.20-6" date="1643457600">- Tell systemd when dbus is ready/shutting down/reloading config.</changelog>
  <changelog author="hongjinghao &lt;hongjinghao@huawei.com&gt; - 1:1.12.20-7" date="1663675200">- Stop using selinux set_mapping function.</changelog>
  <changelog author="hongjinghao &lt;hongjinghao@huawei.com&gt; - 1:1.12.20-8" date="1666008000">- fix CVE-2022-42010,CVE-2022-42011,CVE-2022-42012</changelog>
  <changelog author="hongjinghao &lt;hongjinghao@huawei.com&gt; - 1:1.12.20-9" date="1686312000">- fix CVE-2023-34969</changelog>
</package>
<package pkgid="09f7a2656676bdf8d0b0d91abef8329543e2e5e8c1ac804eadece780712e5091" name="dbus-broker" arch="src">
  <version epoch="0" ver="29" rel="9.oe2203sp1"/>
  <changelog author="licunlong&lt;licunlong1@huawei.com&gt; - 29-1" date="1639656000">- Type:enhance
- CVE:NA
- SUG:NA
- DESC:update dbus-broker to v29</changelog>
  <changelog author="licunlong&lt;licunlong1@huawei.com&gt; - 29-2" date="1645531200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:don't enable/disable dbus.socket when install/uninstall dbus-broker.</changelog>
  <changelog author="licunlong&lt;licunlong1@huawei.com&gt; - 29-3" date="1667908800">- Enable test-parallel</changelog>
  <changelog author="hongjinghao&lt;hongjinghao@huawei.com&gt; - 29-4" date="1669118400">- Fix CVE-2022-31212 and CVE-31213</changelog>
  <changelog author="licunlong&lt;licunlong1@huawei.com&gt; - 29-5" date="1669896000">- Optimize installing and removing dbus-broker</changelog>
  <changelog author="hongjinghao&lt;hongjinghao@huawei.com&gt; - 29-6" date="1686139200">- Enable dbus-broker to reexecute without disconnection</changelog>
  <changelog author="hongjinghao&lt;hongjinghao@huawei.com&gt; - 29-7" date="1687694400">- sync patches from dbus-broker community</changelog>
  <changelog author="hongjinghao&lt;hongjinghao@huawei.com&gt; - 29-8" date="1691582400">- sync patches from dbus-broker community</changelog>
  <changelog author="hongjinghao&lt;hongjinghao@huawei.com&gt; - 29-9" date="1696680000">- Fix buffer leakage</changelog>
</package>
<package pkgid="6e86b5c6f43bd3471b204b2fa1942ef59e9b5e1041c85d65281a3f0bc1d630d2" name="digest-list-tools" arch="src">
  <version epoch="0" ver="0.3.95" rel="11.oe2203sp1"/>
  <changelog author="Anakin Zhang &lt;zhangtianxing3@huawei.com&gt; - 0.3.95-3" date="1627905600">- Fix multiple definition of pgp_algo_mapping</changelog>
  <changelog author="Anakin Zhang &lt;zhangtianxing3@huawei.com&gt; - 0.3.95-4" date="1629806400">- Fix warning in digestlist.conf</changelog>
  <changelog author="Anakin Zhang &lt;zhangtianxing3@huawei.com&gt; - 0.3.95-5" date="1638446400">- Fix typo and duplicated kernel parameters</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 0.3.95-6" date="1659182400">- Fix sm3 algorithm name</changelog>
  <changelog author="shenxiangwei &lt;shenxiangwei1@huawei.com&gt; - 0.3.95-7" date="1660651200">- Fix faulty code, file resource leakeage and memory leakage</changelog>
  <changelog author="shenxiangwei &lt;shenxiangwei1@huawei.com&gt; - 0.3.95-8" date="1661256000">- Update fix-faulty-code.patch</changelog>
  <changelog author="shenxiangwei &lt;shenxiangwei1@huawei.com&gt; - 0.3.95-9" date="1662552000">- Delete setup-ima-digest-lists.service</changelog>
  <changelog author="gaoyusong &lt;gaoyusong2@huawei.com&gt; - 0.3.95-10" date="1671537600">- Fix error exit in dracut program</changelog>
  <changelog author="zhoushuiqing &lt;zhoushuiqing2@huawei.com&gt; - 0.3.95-11" date="1684929600">- Fix cap_struct to adapter libcap 2.61</changelog>
</package>
<package pkgid="7b5107d8d877a67bbbc059000b489e7905e5ca9ce8de2c86a7d3d96db6547078" name="djvulibre" arch="src">
  <version epoch="0" ver="3.5.27" rel="19.oe2203sp1"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.5.27-19" date="1694606400">- Fix CVE-2021-46310,CVE-2021-46312</changelog>
</package>
<package pkgid="f310947f5421492daf815b9acfdbb36465487c95fe1302ff4192f67ded063d26" name="dmidecode" arch="src">
  <version epoch="1" ver="3.4" rel="3.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@huawei.com&gt; - 3.3-1" date="1638273600">- update to 3.3</changelog>
  <changelog author="Yang Yanchao &lt;yangyanchao6@huawei.com&gt; - 3.3-2" date="1643457600">- add command --compat-uuid</changelog>
  <changelog author="Yang Yanchao &lt;yangyanchao6@huawei.com&gt; - 3.3-3" date="1645704000">- dmidecode: Fix crash with -u option</changelog>
  <changelog author="fanrui &lt;fary.fanrui@huawei.com&gt; - 1:3.3-4" date="1666699200">- rebuild package</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 1:3.3-4" date="1667476800">- Add sw64 architecture</changelog>
  <changelog author="fanrui&lt;fary.fanrui@huawei.com&gt; - 1:3.4-1" date="1667995200">- Update to 3.4</changelog>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 1:3.4-2" date="1668427200">- add loongarch support for dmidecode</changelog>
  <changelog author="Cunshu Ni &lt;nicunshu@huawei.com&gt; - 1:3.4-3" date="1681819200">- fix CVE-2023-30630</changelog>
</package>
<package pkgid="6128bbfca2a76a3e9417375bbb5f47af6ed70b0d3e16b501f5cc46d819e9d59f" name="dmraid" arch="src">
  <version epoch="0" ver="1.0.0.rc16" rel="55.oe2203sp1"/>
  <changelog author="shaoxuehua &lt;shao_xuehua@hoperun.com&gt; - 1.0.0.rc16-55" date="1695297600">- fix segmentation fault when using "dmraid -h" on aarch64</changelog>
</package>
<package pkgid="9852ba4ab7f0c1baacbe3a8efffd93fa5818fb01ba8a83330046481dba3914fc" name="dnf" arch="src">
  <version epoch="0" ver="4.14.0" rel="10.oe2203sp1"/>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-1" date="1667476800">- DESC:upgrade dnf version to 4.14.0</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-2" date="1668600000">- DESC:correct the incorrect Obsoletes</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-3" date="1670587200">- DESC:enable DT</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-4" date="1670587201">- DESC:add sw64 and loongarch support for dnf</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-5" date="1670932800">- DESC:fix dnf-data downgrade confilct with dnf</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-6" date="1671105600">- DESC:remove tests</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-7" date="1671537600">- DESC:fix test cases failed in tests/test_plugin.py</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 4.14.0-8" date="1673006400">- DESC: fix build error for loongarch64</changelog>
  <changelog author="xiasenlin &lt;xiasenlin1@huawei.com&gt; - 4.14.0-9" date="1673352000">- DESC:add get-lockfile-exists-before-unlick.patch</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; 4.14.0-10" date="1676635200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:fix install error when vim file in /etc/dnf/vars/</changelog>
</package>
<package pkgid="0f6b19a8414f2c1e5f3790469aebace74595cc00fb12fc46479c3d671d8908f2" name="dnf" arch="src">
  <version epoch="0" ver="4.14.0" rel="13.oe2203sp1"/>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-4" date="1670587200">- DESC:add sw64 and loongarch support for dnf</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-5" date="1670932800">- DESC:fix dnf-data downgrade confilct with dnf</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-6" date="1671105600">- DESC:remove tests</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-7" date="1671537600">- DESC:fix test cases failed in tests/test_plugin.py</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 4.14.0-8" date="1673006400">- DESC: fix build error for loongarch64</changelog>
  <changelog author="xiasenlin &lt;xiasenlin1@huawei.com&gt; - 4.14.0-9" date="1673352000">- DESC:add get-lockfile-exists-before-unlick.patch</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; 4.14.0-10" date="1676635200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:fix install error when vim file in /etc/dnf/vars/</changelog>
  <changelog author="xiasenlin &lt;xiasenlin1@huawei.com&gt; - 4.14.0-11" date="1677067200">- DESC:Add exception capture to get-lockfile-exists-before-unlick.patch</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; 4.14.0-12" date="1678190400">- CVE:NA
- SUG:NA
- DESC:dnf:fix undo error when include rollback of group upgrade
           fix can't download package when url have characters encoded</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; 4.14.0-13" date="1678708800">- CVE:NA
- SUG:NA
- DESC:dnf:fix AttributeError when io busy and press ctrl c</changelog>
</package>
<package pkgid="e1567636512e437b30c5c716e413c7790f95554aef9992ad965d37b04e64a8ab" name="dnf" arch="src">
  <version epoch="0" ver="4.14.0" rel="14.oe2203sp1"/>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-5" date="1670932800">- DESC:fix dnf-data downgrade confilct with dnf</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-6" date="1671105600">- DESC:remove tests</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-7" date="1671537600">- DESC:fix test cases failed in tests/test_plugin.py</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 4.14.0-8" date="1673006400">- DESC: fix build error for loongarch64</changelog>
  <changelog author="xiasenlin &lt;xiasenlin1@huawei.com&gt; - 4.14.0-9" date="1673352000">- DESC:add get-lockfile-exists-before-unlick.patch</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; 4.14.0-10" date="1676635200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:fix install error when vim file in /etc/dnf/vars/</changelog>
  <changelog author="xiasenlin &lt;xiasenlin1@huawei.com&gt; - 4.14.0-11" date="1677067200">- DESC:Add exception capture to get-lockfile-exists-before-unlick.patch</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; 4.14.0-12" date="1678190400">- CVE:NA
- SUG:NA
- DESC:dnf:fix undo error when include rollback of group upgrade
           fix can't download package when url have characters encoded</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; 4.14.0-13" date="1678708800">- CVE:NA
- SUG:NA
- DESC:dnf:fix AttributeError when io busy and press ctrl c</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-14" date="1687867200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:cli:allow = in setopt values</changelog>
</package>
<package pkgid="cb641c0260cab4864696373f3c5bfdb43f056ea8018889ea1ff2972765fd166f" name="dnf" arch="src">
  <version epoch="0" ver="4.14.0" rel="15.oe2203sp1"/>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-6" date="1671105600">- DESC:remove tests</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-7" date="1671537600">- DESC:fix test cases failed in tests/test_plugin.py</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 4.14.0-8" date="1673006400">- DESC: fix build error for loongarch64</changelog>
  <changelog author="xiasenlin &lt;xiasenlin1@huawei.com&gt; - 4.14.0-9" date="1673352000">- DESC:add get-lockfile-exists-before-unlick.patch</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; 4.14.0-10" date="1676635200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:fix install error when vim file in /etc/dnf/vars/</changelog>
  <changelog author="xiasenlin &lt;xiasenlin1@huawei.com&gt; - 4.14.0-11" date="1677067200">- DESC:Add exception capture to get-lockfile-exists-before-unlick.patch</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; 4.14.0-12" date="1678190400">- CVE:NA
- SUG:NA
- DESC:dnf:fix undo error when include rollback of group upgrade
           fix can't download package when url have characters encoded</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; 4.14.0-13" date="1678708800">- CVE:NA
- SUG:NA
- DESC:dnf:fix AttributeError when io busy and press ctrl c</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-14" date="1687867200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:cli:allow = in setopt values</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-15" date="1689336000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:remove patch about pidfile</changelog>
</package>
<package pkgid="b8c4061d0ad4407eef5c3ad2b1f5308562bc8a5c2476324417cd6b51de1baa7b" name="dnf" arch="src">
  <version epoch="0" ver="4.14.0" rel="18.oe2203sp1"/>
  <changelog author="xiasenlin &lt;xiasenlin1@huawei.com&gt; - 4.14.0-9" date="1673352000">- DESC:add get-lockfile-exists-before-unlick.patch</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; 4.14.0-10" date="1676635200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:fix install error when vim file in /etc/dnf/vars/</changelog>
  <changelog author="xiasenlin &lt;xiasenlin1@huawei.com&gt; - 4.14.0-11" date="1677067200">- DESC:Add exception capture to get-lockfile-exists-before-unlick.patch</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; 4.14.0-12" date="1678190400">- CVE:NA
- SUG:NA
- DESC:dnf:fix undo error when include rollback of group upgrade
           fix can't download package when url have characters encoded</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; 4.14.0-13" date="1678708800">- CVE:NA
- SUG:NA
- DESC:dnf:fix AttributeError when io busy and press ctrl c</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-14" date="1687867200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:cli:allow = in setopt values</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-15" date="1689336000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:remove patch about pidfile</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 4.14.0-16" date="1691841600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:Add provide exception handling</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 4.14.0-17" date="1692014400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:remove useless patch of loongarch64
       dnf:recreate patch of sw64 and make arch sorted alphabetically</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-18" date="1703851200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:Fix bash completion due to sqlite changes
           When parsing over a KVP list, do not return till the whole list is parsed</changelog>
</package>
<package pkgid="187e3ae8de757bf14162545800751432df3513f4aecfc75e19b61f38a27f2b02" name="dnf" arch="src">
  <version epoch="0" ver="4.14.0" rel="22.oe2203sp1"/>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; 4.14.0-13" date="1678708800">- CVE:NA
- SUG:NA
- DESC:dnf:fix AttributeError when io busy and press ctrl c</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-14" date="1687867200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:cli:allow = in setopt values</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-15" date="1689336000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:remove patch about pidfile</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 4.14.0-16" date="1691841600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:Add provide exception handling</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 4.14.0-17" date="1692014400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:remove useless patch of loongarch64
       dnf:recreate patch of sw64 and make arch sorted alphabetically</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-18" date="1703851200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:Fix bash completion due to sqlite changes
           When parsing over a KVP list, do not return till the whole list is parsed</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 4.14.0-19" date="1714996800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:Remove --duplicates and --oldinstallonly exit with 0 when nothing to remove and Add all candidates for reinstall to solver</changelog>
  <changelog author="LuWu &lt;2398491106@qq.com&gt; - 4.14.0-20" date="1721217600">- Limit queries to nevra forms when provided by command and Update the man page entry for the countme option</changelog>
  <changelog author="liyuzhe &lt;liyuzhe@cqsoftware.com.cn&gt; - 4.14.0-21" date="1723550400">- Fixed incorrect macro within the automatic subpackage</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 4.14.0-22" date="1725796800">- Drop wrong obsolete tag</changelog>
</package>
<package pkgid="9b2d7ff6e339cd041a12739da69c946d0e9891b6b531d81e1712f1dfc104a6f6" name="dnf-plugins-core" arch="src">
  <version epoch="0" ver="4.3.1" rel="3.oe2203sp1"/>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 4.0.17-3" date="1626782400">- delete gdb in buildrequires</changelog>
  <changelog author="hanhui&lt;hanhui15@huawei.com&gt; - 4.0.24-1" date="1637668800">- DESC:update to 4.0.24</changelog>
  <changelog author="wangkerong&lt;wangkerong@huawei.com&gt; - 4.0.24-2" date="1641556800">- DESC:delete buildrequires of python-nose</changelog>
  <changelog author="hanhui&lt;hanhui15@huawei.com&gt; - 4.0.24-3" date="1642852800">- DESC:Reposync does not stop downloading packages</changelog>
  <changelog author="wangkerong&lt;wangkerong@h-partners.com&gt; - 4.0.24-4" date="1653566400">- DESC: Remove redundant BuildRequires</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.0.24-5" date="1661169600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add configfile post-transaction-actions.d</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.3.1-1" date="1667476800">- DESC:upgrade dnf-plugins-core version to 4.3.1</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.3.1-2" date="1669896000">- DESC:modify incorrect contents in spec file</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.3.1-3" date="1687867200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf-plugins-core:download plugin:respect install_weak_deps option value</changelog>
</package>
<package pkgid="cba301fe754c8c911409b1726cbfc0cd119d31deec3353a39304d8a2ace98e49" name="dnsmasq" arch="src">
  <version epoch="0" ver="2.86" rel="8.oe2203sp1"/>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 2.86-2" date="1657713600">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2022-0934</changelog>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 2.86-3" date="1666872000">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:Fix parsing of IPv6 addresses with peer from netlink
       Fix bad interaction between --address=/#/&lt;ip&gt; and
            --server=/some.domain/#
       Fix --address=/#/...... which was lost in 2.86</changelog>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 2.86-4" date="1679140800">- Type:CVE
- Id:CVE-2023-28450
- SUG:NA
- DESC:fix CVE-2023-28450</changelog>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 2.86-5" date="1680004800">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:backport some upstream patches</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 2.86-6" date="1682596800">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:remove useless patch</changelog>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 2.86-7" date="1700654400">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:Fix memory leak when using --dhcp-optsfile with DHCPv6 options</changelog>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 2.86-8" date="1718107200">- Type:CVE
- Id:CVE-2023-49441
- SUG:NA
- DESC:Fix CVE-2023-49441</changelog>
</package>
<package pkgid="5d484d2f1ea402e6d1919a8d6592a40d39785a1002e0f3c0a3eac6ec3554c332" name="docker-engine" arch="src">
  <version epoch="2" ver="18.09.0" rel="323.oe2203sp1"/>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-313" date="1669118400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:cleanup netns file when stop docker daemon</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-314" date="1669118401">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix dockerd core when release network</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-315" date="1669291200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:using VERSION-vendor to record version</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 18.09.0-316" date="1669896000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:do not stop health check before sending signal</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-317" date="1676635200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:set freezer.state to Thawed to increase freeze chances</changelog>
  <changelog author="Song Zhang&lt;zhangsong34@huawei.com&gt; - 18.09.0-318" date="1678449600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:docker stats: fix 'panic: close of closed channel'</changelog>
  <changelog author="JackChan8&lt;chenjiankun1@huawei.com&gt; - 18.09.0-319" date="1678795200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix container missing after restarting dockerd twice</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 18.09.0-320" date="1678881600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:try http for docker manifest insecure</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 18.09.0-321" date="1680091200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync some patches</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 18.09.0-323" date="1680782400">- Type:CVE
- CVE:CVE-2023-28840,CVE-2023-28841,CVE-2023-28842
- SUG:NA
- DESC:fix CVE-2023-28840,CVE-2023-28841,CVE-2023-28842</changelog>
</package>
<package pkgid="18fef2b0085b252358280bdf5aa82e5c25a1a3c2d8eb205ba6bc89ffcdab3037" name="docker-engine" arch="src">
  <version epoch="2" ver="18.09.0" rel="333.oe2203sp1"/>
  <changelog author="yangchenguang &lt;yangchenguang@kylinsec.com.cn&gt; - 18.09.0-324" date="1681905600">- Sync 2203 support loongarch file</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 18.09.0-325" date="1686225600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:thinpool full because docker daemon restart when docker pull</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 18.09.0-326" date="1689163200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove invalid libcgroup dependencies</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-327" date="1689249600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync patches from master</changelog>
  <changelog author="jingxiaolu&lt;lujingxiao@huawei.com&gt; - 18.09.0-328" date="1690545600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:define a dummy hostname to use for local connections</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-329" date="1693051200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove useless mount point dir</changelog>
  <changelog author="Lu Jingxiao&lt;lujingxiao@huawei.com&gt; - 18.09.0-330" date="1696852800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix COPY --from should preserve ownership</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 18.09.0-331" date="1697112000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add delay after freeze</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-332" date="1704196800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync patches from upstream</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-333" date="1710849600">- Type:CVE
- CVE:CVE-2024-24557
- SUG:NA
- DESC:fix CVE-2024-24557</changelog>
</package>
<package pkgid="ed26d9d36bcb0e7d7ee58f59e968eadf881ddefe4fb840520db5ffa426de84ed" name="docker-engine" arch="src">
  <version epoch="2" ver="18.09.0" rel="334.oe2203sp1"/>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 18.09.0-325" date="1686225600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:thinpool full because docker daemon restart when docker pull</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 18.09.0-326" date="1689163200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove invalid libcgroup dependencies</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-327" date="1689249600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync patches from master</changelog>
  <changelog author="jingxiaolu&lt;lujingxiao@huawei.com&gt; - 18.09.0-328" date="1690545600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:define a dummy hostname to use for local connections</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-329" date="1693051200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove useless mount point dir</changelog>
  <changelog author="Lu Jingxiao&lt;lujingxiao@huawei.com&gt; - 18.09.0-330" date="1696852800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix COPY --from should preserve ownership</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 18.09.0-331" date="1697112000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add delay after freeze</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-332" date="1704196800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync patches from upstream</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-333" date="1710849600">- Type:CVE
- CVE:CVE-2024-24557
- SUG:NA
- DESC:fix CVE-2024-24557</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-334" date="1712923200">- Type:CVE
- CVE:CVE-2024-29018
- SUG:NA
- DESC:fix CVE-2024-29018</changelog>
</package>
<package pkgid="f41773e06367aa197f84a3e4b1201896a57492a1592b06cdd4d32247499ba8e9" name="docker-engine" arch="src">
  <version epoch="2" ver="18.09.0" rel="335.oe2203sp1"/>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 18.09.0-326" date="1689163200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove invalid libcgroup dependencies</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-327" date="1689249600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync patches from master</changelog>
  <changelog author="jingxiaolu&lt;lujingxiao@huawei.com&gt; - 18.09.0-328" date="1690545600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:define a dummy hostname to use for local connections</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-329" date="1693051200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove useless mount point dir</changelog>
  <changelog author="Lu Jingxiao&lt;lujingxiao@huawei.com&gt; - 18.09.0-330" date="1696852800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix COPY --from should preserve ownership</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 18.09.0-331" date="1697112000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add delay after freeze</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-332" date="1704196800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync patches from upstream</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-333" date="1710849600">- Type:CVE
- CVE:CVE-2024-24557
- SUG:NA
- DESC:fix CVE-2024-24557</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-334" date="1712923200">- Type:CVE
- CVE:CVE-2024-29018
- SUG:NA
- DESC:fix CVE-2024-29018</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-335" date="1715169600">- Type:CVE
- CVE:CVE-2024-32473
- SUG:NA
- DESC:fix CVE-2024-32473</changelog>
</package>
<package pkgid="6abe0f50e61274d2c49c35b1a3df4195b1578806188c7d3f9a08d2f909d2b2a7" name="docker-engine" arch="src">
  <version epoch="2" ver="18.09.0" rel="340.oe2203sp1"/>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-329" date="1693051200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove useless mount point dir</changelog>
  <changelog author="Lu Jingxiao&lt;lujingxiao@huawei.com&gt; - 18.09.0-330" date="1696852800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix COPY --from should preserve ownership</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 18.09.0-331" date="1697112000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add delay after freeze</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-332" date="1704196800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync patches from upstream</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-333" date="1710849600">- Type:CVE
- CVE:CVE-2024-24557
- SUG:NA
- DESC:fix CVE-2024-24557</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-334" date="1712923200">- Type:CVE
- CVE:CVE-2024-29018
- SUG:NA
- DESC:fix CVE-2024-29018</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-335" date="1715169600">- Type:CVE
- CVE:CVE-2024-32473
- SUG:NA
- DESC:fix CVE-2024-32473</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-338" date="1721044800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Ignore SIGURG on Linux</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 18.09.0-339" date="1721995200">- Type:CVE
- CVE:CVE-2024-41110
- SUG:NA
- DESC:fix CVE-2024-41110</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 2:18.09.0-340" date="1722600000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add clone3 seccomp whitelist for arm64</changelog>
</package>
<package pkgid="09574e11403ccc000c86ac9db0fb01aa01ece26b472996bd47f4147d17fc71cd" name="docker-runc" arch="src">
  <version epoch="0" ver="1.1.3" rel="13.oe2203sp1"/>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-4" date="1666094400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:move install path to /usr/bin</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-5" date="1667563200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:move install path to /usr/bin</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-6" date="1667822400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:runc log forward to syslog</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-7" date="1671278400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:support specify umask</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-8" date="1672920000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:modify apply-patch path</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-9" date="1673352000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:support specify umask</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-10" date="1673956800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:modify linuxcontainer starttime uint64 type tobe string</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-11" date="1675944000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:make runc spec compatible 1.0.0.rc3</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-12" date="1679400000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:libcontainer: skip chown of /dev/null caused by fd redirection</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-13" date="1680609600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix rootless /sys/fs/cgroup mounts bug and Prohibit /proc and /sys to be symlinks</changelog>
</package>
<package pkgid="932b4cf643cadd7dd064c27b605bda168295525327eb858710113889d61c42d2" name="docker-runc" arch="src">
  <version epoch="0" ver="1.1.3" rel="23.oe2203sp1"/>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-15" date="1687348800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync some patches</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-16" date="1695038400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix init error return logic</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-17" date="1697112000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:handle kmem.limit_in_bytes removal</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-18" date="1698148800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix update rt-runtime-us and rt-period-us failed</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-19" date="1698321600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix the bug when runc syscall.Exec cmd not exist cause panic</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-20" date="1701691200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:runc delete do not ignore error from destroy</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-21" date="1702036800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:libct: Destroy: don't proceed in case of errors</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-22" date="1703160000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync some patches</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-23" date="1706788800">- Type:CVE
- CVE:CVE-2024-21626
- SUG:NA
- DESC:fix CVE-2024-21626</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-24" date="1707220800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:check cmd exist</changelog>
</package>
<package pkgid="087119614d4525825659d699c398d45e0c884b77116b00e423336dbfdbfadb35" name="docker-runc" arch="src">
  <version epoch="0" ver="1.1.3" rel="25.oe2203sp1"/>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-16" date="1695038400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix init error return logic</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-17" date="1697112000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:handle kmem.limit_in_bytes removal</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-18" date="1698148800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix update rt-runtime-us and rt-period-us failed</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-19" date="1698321600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix the bug when runc syscall.Exec cmd not exist cause panic</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-20" date="1701691200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:runc delete do not ignore error from destroy</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-21" date="1702036800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:libct: Destroy: don't proceed in case of errors</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-22" date="1703160000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync some patches</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-23" date="1706788800">- Type:CVE
- CVE:CVE-2024-21626
- SUG:NA
- DESC:fix CVE-2024-21626</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-24" date="1707220800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:check cmd exist</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-25" date="1716552000">- Type:CVE
- CVE:CVE-2024-3154
- SUG:NA
- DESC:fix CVE-2024-3154</changelog>
</package>
<package pkgid="8f7bbc43f75e0741f6acc9a98b9977fa7769ec2ea2dac18ea4615b70de8d8004" name="docker-runc" arch="src">
  <version epoch="0" ver="1.1.3" rel="28.oe2203sp1"/>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-18" date="1698148800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix update rt-runtime-us and rt-period-us failed</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-19" date="1698321600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix the bug when runc syscall.Exec cmd not exist cause panic</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-20" date="1701691200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:runc delete do not ignore error from destroy</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-21" date="1702036800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:libct: Destroy: don't proceed in case of errors</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-22" date="1703160000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync some patches</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-23" date="1706788800">- Type:CVE
- CVE:CVE-2024-21626
- SUG:NA
- DESC:fix CVE-2024-21626</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-24" date="1707220800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:check cmd exist</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-25" date="1716552000">- Type:CVE
- CVE:CVE-2024-3154
- SUG:NA
- DESC:fix CVE-2024-3154</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-27" date="1718798400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Set temporary single CPU affinity before cgroup cpuset transition</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-28" date="1720699200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:do not support set umask through native.umask</changelog>
</package>
<package pkgid="65d431cbb1bcee939ce9ba32a56590f1b4306a7165a0384ad6127067aa6c162f" name="docker-runc" arch="src">
  <version epoch="0" ver="1.1.3" rel="30.oe2203sp1"/>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-20" date="1701691200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:runc delete do not ignore error from destroy</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-21" date="1702036800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:libct: Destroy: don't proceed in case of errors</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-22" date="1703160000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync some patches</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-23" date="1706788800">- Type:CVE
- CVE:CVE-2024-21626
- SUG:NA
- DESC:fix CVE-2024-21626</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-24" date="1707220800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:check cmd exist</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-25" date="1716552000">- Type:CVE
- CVE:CVE-2024-3154
- SUG:NA
- DESC:fix CVE-2024-3154</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-27" date="1718798400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Set temporary single CPU affinity before cgroup cpuset transition</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-28" date="1720699200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:do not support set umask through native.umask</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-29" date="1725019200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:format log instead panic when procError missing payload</changelog>
  <changelog author="Song Zhang&lt;zhangsong34@huawei.com&gt; - 1.1.3-30" date="1725969600">- Type:CVE
- CVE:CVE-2024-45310
- SUG:NA
- DESC:fix CVE-2024-45310</changelog>
</package>
<package pkgid="9d58819e8640cb7b5749e4ef1f09447f6cc26342117ccde84fad4ec09f480d26" name="docker-runc" arch="src">
  <version epoch="0" ver="1.1.3" rel="9.oe2203sp1"/>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.0.0.rc3-303" date="1660046400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:bump version to 303</changelog>
  <changelog author="wangjunqi &lt;wangjunqi@kylinos.cn&gt; - 1.1.3-1" date="1660046401">- update to 1.1.3</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-2" date="1660046402">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:change Umask to 0022</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-3" date="1660651200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix systemd cgroup after memory type changed</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-4" date="1666094400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:move install path to /usr/bin</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-5" date="1667563200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:move install path to /usr/bin</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-6" date="1667822400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:runc log forward to syslog</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-7" date="1671278400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:support specify umask</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-8" date="1672920000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:modify apply-patch path</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-9" date="1673352000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:support specify umask</changelog>
</package>
<package pkgid="291e201dfe52ab27c53e3c7099b1151187801fe1c9b110279d7c33e2e76864f8" name="dovecot" arch="src">
  <version epoch="1" ver="2.3.15" rel="6.oe2203sp1"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 1:2.3.15-5" date="1664366400">- Fix CVE-2022-30550</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:2.3.15-6" date="1723636800">- fix CVE-2024-23184, CVE-2024-23185</changelog>
</package>
<package pkgid="a01d25d98da991d1a1977e27d327fc5e0f7ec0e6cca049b30d69df06e994ec40" name="dpdk" arch="src">
  <version epoch="0" ver="21.11" rel="42.oe2203sp1"/>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-33" date="1676980800">refactor Rc/Tx function of hns3 PMD
 And patchs are as follows:
  - net/hns3: fix burst mode query with dummy function
  - net/hns3: add debug info for Rx/Tx dummy function
  - net/hns3: remove debug condition for Tx prepare
  - net/hns3: separate Tx prepare from getting Tx function
  - net/hns3: make getting Tx function static
  - net/hns3: extract common functions to set Rx/Tx</changelog>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-34" date="1677844800">Support flow rule keeping capability for hns3 PMD and
 testpmd. Patchs are as follow:
  - net/hns3: declare flow rule keeping capability
  - app/testpmd: add --disable-flow-flush option</changelog>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-35" date="1678881600">Fix some RSS bugs and reimplement hash flow function for hns3:
  - fix some RSS bugs and optimize RSS codes for hns3
  - reimplement hash flow function for hns3 to satisfy the
    mainstream usage of rte flow hash in the community</changelog>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-36" date="1679572800">Fix a m_buf pool was not freed bugs for test and support
 CPPC cpufreq for l3fwd-power. Patchs are as follow:
  - test/mbuf: fix mbuf reset test
  - examples/l3fwd-power: support CPPC cpufreq</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-37" date="1680350400">- hinic: free tx mbuf use rte_pktmbuf_free_seg</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-38" date="1680350401">- build as shared libraries to reduce the size of debug packet</changelog>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-39" date="1680609600">Sync some patchs from upstreaming branch and modifies
 are as follow:
 1. Add private dump for bonding, virtio and vhost.
 2. Support LACP info dump for bonding.
 3. Display RSS hash key of flow rule in testpmd.</changelog>
  <changelog author="bigclouds99 &lt;yuelg@chinaunicom.cn&gt; - 21.11-40" date="1681214400">- Create a softlink to dpdk default driver path</changelog>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-41" date="1682078400">- Telemetry: support display as hexadecimal
 Sync some patchs from upstreaming for telemetry and modifies
 are as follow:
 1. Support dispaly integer as hexadecimal.
 2. Fix data truncation for some u64 accept as int.
 3. Add JSON pretty print.</changelog>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-42" date="1682596800">- fix empty devargs parsing
 Sync some patchs from upstreaming and modifies are as
 follow:
 1. The rte_kvargs_process() was used to parse KV pairs, it
 also supports to parse 'only keys' type. And the callback
 function parameter 'value' is NULL when parsed 'only keys'.
 This patch fixes segment fault when parse input args with
 'only keys'.
 2. The MAP_FAILED should be used to determine whether the
 mapping is successful but not NULL. This patch fix it.</changelog>
</package>
<package pkgid="7f1b367b98a1093ba7e4036b32c24ed108578fd96be86c952c65002346fc5349" name="dpdk" arch="src">
  <version epoch="0" ver="21.11" rel="44.oe2203sp1"/>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-35" date="1678881600">Fix some RSS bugs and reimplement hash flow function for hns3:
  - fix some RSS bugs and optimize RSS codes for hns3
  - reimplement hash flow function for hns3 to satisfy the
    mainstream usage of rte flow hash in the community</changelog>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-36" date="1679572800">Fix a m_buf pool was not freed bugs for test and support
 CPPC cpufreq for l3fwd-power. Patchs are as follow:
  - test/mbuf: fix mbuf reset test
  - examples/l3fwd-power: support CPPC cpufreq</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-37" date="1680350400">- hinic: free tx mbuf use rte_pktmbuf_free_seg</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-38" date="1680350401">- build as shared libraries to reduce the size of debug packet</changelog>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-39" date="1680609600">Sync some patchs from upstreaming branch and modifies
 are as follow:
 1. Add private dump for bonding, virtio and vhost.
 2. Support LACP info dump for bonding.
 3. Display RSS hash key of flow rule in testpmd.</changelog>
  <changelog author="bigclouds99 &lt;yuelg@chinaunicom.cn&gt; - 21.11-40" date="1681214400">- Create a softlink to dpdk default driver path</changelog>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-41" date="1682078400">- Telemetry: support display as hexadecimal
 Sync some patchs from upstreaming for telemetry and modifies
 are as follow:
 1. Support dispaly integer as hexadecimal.
 2. Fix data truncation for some u64 accept as int.
 3. Add JSON pretty print.</changelog>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-42" date="1682596800">- fix empty devargs parsing
 Sync some patchs from upstreaming and modifies are as
 follow:
 1. The rte_kvargs_process() was used to parse KV pairs, it
 also supports to parse 'only keys' type. And the callback
 function parameter 'value' is NULL when parsed 'only keys'.
 This patch fixes segment fault when parse input args with
 'only keys'.
 2. The MAP_FAILED should be used to determine whether the
 mapping is successful but not NULL. This patch fix it.</changelog>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-43" date="1684929600">Sync some patchs from upstreaming for hns3 pmd and modifies
 are as follow:
 1. support flow control autoneg for fiber port
 2. support simplify hardware checksum offloading
 3. support dump media type
 4. add Tx Rx descriptor logs
 5. fix Rx multiple firmware reset interrupts
 6. ethdev: fix one address occupies two entries in MAC addrs</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-44" date="1685188800">- examples use static libraries to avoid unlinked dynamic libraries</changelog>
</package>
<package pkgid="b16b79d942368b644df9df74d2c054811a5dd9a1f6a9bd6081d9b1cc8af779dc" name="dpdk" arch="src">
  <version epoch="0" ver="21.11" rel="50.oe2203sp1"/>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-49" date="1686657600">- pdump: fix pcap_dump coredump caused by incorrect pkt_len</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-50" date="1687176000">- gro: fix gro with tcp push flag</changelog>
</package>
<package pkgid="fc26a6d3c7961fb0e6847fbbc03a660bfb70fdad392e5852ed54c7a98c83ad4a" name="dpdk" arch="src">
  <version epoch="0" ver="21.11" rel="63.oe2203sp1"/>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-54" date="1689422400">- kni: fix build with Linux 6.3/6.5
- remove unused patch intruduced by "fix build with GCC 12"</changelog>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-55" date="1689595200">Sync some patchs from upstreaming about add FDIR VLAN match
 mode runtime config and fix doc format for hns3 pmd. Patchs
 are as follow:
 - doc: unify sections of networking drivers guide
 - net/hns3: delete duplicate macro definition
 - net/hns3: add FDIR VLAN match mode runtime config
 - doc: fix kernel patch link in hns3 guide
 - doc: fix syntax in hns3 guide
 - doc: fix number of leading spaces in hns3 guide</changelog>
  <changelog author="huangdengdui &lt;huangdengui@huawei.com&gt; - 21.11-56" date="1692619200">replace patch-287 to solve the duplicate setting for MAC address.</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 21.11-57" date="1693396800">- Add support for sw_64</changelog>
  <changelog author="huangdengdui &lt;huangdengui@huawei.com&gt; - 21.11-58" date="1698408000">Sync some patchs from upstreaming and modifies are as follow:
 - maintainers: update for hns3 driver
 - app/testpmd: add command to flush multicast MAC addresses
 - app/testpmd: fix help string
 - app/testpmd: fix multicast address pool leak
 - net/hns3: optimize SVE Rx performance
 - net/hns3: optimize rearm mbuf for SVE Rx
 - net/hns3: optimize free mbuf for SVE Tx
 - net/hns3: fix order in NEON Rx
 - net/hns3: fix traffic management dump text alignment
 - net/hns3: fix traffic management thread safety
 - net/hns3: fix flushing multicast MAC address
 - net/hns3: fix error code for multicast resource
 - net/hns3: fix VF default MAC modified when set failed
 - net/hns3: fix index to look up table in NEON Rx
 - net/hns3: fix non-zero weight for disabled TC
 - config/arm: add HiSilicon HIP10</changelog>
  <changelog author="huangdengdui &lt;huangdengui@huawei.com&gt; - 21.11-59" date="1700481600">Sync some patchs from upstreaming and modifies are as follow:
 - net/hns3: fix mailbox sync
 - net/hns3: report maximum buffer size
 - ethdev: add maximum Rx buffer size
 - app/procinfo: show RSS hash algorithm
 - ethdev: get RSS algorithm names
 - app/procinfo: adjust format of RSS info
 - app/procinfo: fix RSS info
 - net/hns3: support setting and querying RSS hash function
 - net/hns3: report RSS hash algorithms capability
 - ethdev: set and query RSS hash algorithm
 - ethdev: clarify RSS related fields usage
 - net/hns3: fix uninitialized hash algo value
 - net/hns3: keep set/get algo key functions local
 - net/hns3: fix some error logs
 - net/hns3: fix some return values
 - net/hns3: fix LRO offload to report
 - net/hns3: fix setting DCB capability
 - app/testpmd: ease configuring all offloads
 - net/hns3: refactor interrupt state query
 - net/hns3: fix IMP or global reset
 - net/hns3: fix multiple reset detected log
 - net/hns3: remove reset log in secondary
 - net/hns3: fix double stats for IMP and global reset
 - net/hns3: fix crash for NEON and SVE
 - net/hns3: fix unchecked Rx free threshold
 - net/hns3: fix typo in function name
 - net/hns3: fix build warning
 - telemetry: fix repeat display when callback don't init dict</changelog>
  <changelog author="huangdengdui &lt;huangdengui@huawei.com&gt; - 21.11-60" date="1702036800">Sync some bugfix from upstreaming about hns3 reset and modifies
 are as follow:
 - net/hns3: fix VF reset handler interruption
 - net/hns3: fix reset event status
 - net/hns3: fix ignored reset event</changelog>
  <changelog author="huangdengdui &lt;huangdengui@huawei.com&gt; - 21.11-61" date="1702036801">Sync some bugfix from upstreaming about testpmd and doc, modifies
 are as follow:
 - support set RSS hash algorithm
 - ethdev: add new API to get RSS hash algorithm by name
 - doc: fix description of RSS features
 - doc: fix RSS flow description in hns3 guide
 - doc: update features in hns3 guide
 - doc: fix hns3 build option about max queue number
 - app/testpmd: check port and queue Rx/Tx offloads
 - app/testpmd: fix Tx offload command
 - app/testpmd: allow offload config for all ports
 - app/testpmd: fix tunnel TSO configuration
 - app/testpmd: add explicit check for tunnel TSO
 - app/testpmd: fix tunnel TSO capability check
 - app/testpmd: remove useless check in TSO command</changelog>
  <changelog author="huangdengdui &lt;huangdengui@huawei.com&gt; - 21.11-62" date="1702641600">Sync some patches for hns3 about refactor mailbox and bugfix, modifies
 are as follow:
 - net/hns3: fix reset level comparison
 - net/hns3: fix disable command with firmware
 - net/hns3: fix VF multiple count on one reset
 - net/hns3: refactor handle mailbox function
 - net/hns3: refactor send mailbox function
 - net/hns3: refactor PF mailbox message struct
 - net/hns3: refactor VF mailbox message struct</changelog>
  <changelog author="huangdengdui &lt;huangdengui@huawei.com&gt; - 21.11-63" date="1703851200">The hns3 driver don't support QinQ insert for VF</changelog>
</package>
<package pkgid="4c0117d112dfdd2d43c54cf8114c46a50ca6fb8a38e0167e4497c5fc9e0645a5" name="dpdk" arch="src">
  <version epoch="0" ver="21.11" rel="67.oe2203sp1"/>
  <changelog author="huangdengdui &lt;huangdengui@huawei.com&gt; - 21.11-58" date="1698408000">Sync some patchs from upstreaming and modifies are as follow:
 - maintainers: update for hns3 driver
 - app/testpmd: add command to flush multicast MAC addresses
 - app/testpmd: fix help string
 - app/testpmd: fix multicast address pool leak
 - net/hns3: optimize SVE Rx performance
 - net/hns3: optimize rearm mbuf for SVE Rx
 - net/hns3: optimize free mbuf for SVE Tx
 - net/hns3: fix order in NEON Rx
 - net/hns3: fix traffic management dump text alignment
 - net/hns3: fix traffic management thread safety
 - net/hns3: fix flushing multicast MAC address
 - net/hns3: fix error code for multicast resource
 - net/hns3: fix VF default MAC modified when set failed
 - net/hns3: fix index to look up table in NEON Rx
 - net/hns3: fix non-zero weight for disabled TC
 - config/arm: add HiSilicon HIP10</changelog>
  <changelog author="huangdengdui &lt;huangdengui@huawei.com&gt; - 21.11-59" date="1700481600">Sync some patchs from upstreaming and modifies are as follow:
 - net/hns3: fix mailbox sync
 - net/hns3: report maximum buffer size
 - ethdev: add maximum Rx buffer size
 - app/procinfo: show RSS hash algorithm
 - ethdev: get RSS algorithm names
 - app/procinfo: adjust format of RSS info
 - app/procinfo: fix RSS info
 - net/hns3: support setting and querying RSS hash function
 - net/hns3: report RSS hash algorithms capability
 - ethdev: set and query RSS hash algorithm
 - ethdev: clarify RSS related fields usage
 - net/hns3: fix uninitialized hash algo value
 - net/hns3: keep set/get algo key functions local
 - net/hns3: fix some error logs
 - net/hns3: fix some return values
 - net/hns3: fix LRO offload to report
 - net/hns3: fix setting DCB capability
 - app/testpmd: ease configuring all offloads
 - net/hns3: refactor interrupt state query
 - net/hns3: fix IMP or global reset
 - net/hns3: fix multiple reset detected log
 - net/hns3: remove reset log in secondary
 - net/hns3: fix double stats for IMP and global reset
 - net/hns3: fix crash for NEON and SVE
 - net/hns3: fix unchecked Rx free threshold
 - net/hns3: fix typo in function name
 - net/hns3: fix build warning
 - telemetry: fix repeat display when callback don't init dict</changelog>
  <changelog author="huangdengdui &lt;huangdengui@huawei.com&gt; - 21.11-60" date="1702036800">Sync some bugfix from upstreaming about hns3 reset and modifies
 are as follow:
 - net/hns3: fix VF reset handler interruption
 - net/hns3: fix reset event status
 - net/hns3: fix ignored reset event</changelog>
  <changelog author="huangdengdui &lt;huangdengui@huawei.com&gt; - 21.11-61" date="1702036801">Sync some bugfix from upstreaming about testpmd and doc, modifies
 are as follow:
 - support set RSS hash algorithm
 - ethdev: add new API to get RSS hash algorithm by name
 - doc: fix description of RSS features
 - doc: fix RSS flow description in hns3 guide
 - doc: update features in hns3 guide
 - doc: fix hns3 build option about max queue number
 - app/testpmd: check port and queue Rx/Tx offloads
 - app/testpmd: fix Tx offload command
 - app/testpmd: allow offload config for all ports
 - app/testpmd: fix tunnel TSO configuration
 - app/testpmd: add explicit check for tunnel TSO
 - app/testpmd: fix tunnel TSO capability check
 - app/testpmd: remove useless check in TSO command</changelog>
  <changelog author="huangdengdui &lt;huangdengui@huawei.com&gt; - 21.11-62" date="1702641600">Sync some patches for hns3 about refactor mailbox and bugfix, modifies
 are as follow:
 - net/hns3: fix reset level comparison
 - net/hns3: fix disable command with firmware
 - net/hns3: fix VF multiple count on one reset
 - net/hns3: refactor handle mailbox function
 - net/hns3: refactor send mailbox function
 - net/hns3: refactor PF mailbox message struct
 - net/hns3: refactor VF mailbox message struct</changelog>
  <changelog author="huangdengdui &lt;huangdengui@huawei.com&gt; - 21.11-63" date="1703851200">The hns3 driver don't support QinQ insert for VF</changelog>
  <changelog author="peng.zou &lt;peng.zou@shingroup.cn&gt; - 21.11-64" date="1706875200">Add support for ppc64le</changelog>
  <changelog author="zhangmengxuan &lt;zhangmengxuan@kylino.cn&gt; - 21.11-65" date="1712577600">Add add-rte_eth_bond_link_monitoring_get API in map</changelog>
  <changelog author="chenyi &lt;chenyi211@huawei.com&gt; - 21.11-66" date="1716897600">Sync some patches from upstream about bugfix, modifies
 are as follow:
 - app/testpmd: fix crash in multi-process forwarding
 - net/hns3: fix offload flag of IEEE 1588
 - net/hns3: fix read Rx timestamp handle
 - net/hns3: fix double free for Rx/Tx queue
 - net/hns3: fix variable overflow
 - net/hns3: enable PFC for all user priorities
 - ring: add telemetry command for ring info
 - ring: add telemetry command to list rings
 - net/hns3: support power monitor
 - net/hns3: disable SCTP verification tag for RSS hash input
 - app/testpmd: fix RSS algorithm choice</changelog>
  <changelog author="chenyi &lt;chenyi211@huawei.com&gt; - 21.11-67" date="1717416000">Sync some patches from upstream about bugfix, modifies
 are as follow:
 - net/hns3: support new device
 - dma/hisilicon: remove support for HIP09 platform</changelog>
</package>
<package pkgid="2d32164c3f261c98e10437f10ea9eb6c3f3da565bfdc5376b41b5308343e1148" name="dpu-utilities" arch="src">
  <version epoch="0" ver="1.3" rel="1.oe2203sp1"/>
  <changelog author="yangxin &lt;245051644@qq.com&gt; 1.0-1" date="1660305600">- First Spec Version Include qtfs shared filesystem Driver Code</changelog>
  <changelog author="yangxin &lt;245051644@qq.com&gt; 1.0-2" date="1660737600">- Split dpu-utilities into three packages.</changelog>
  <changelog author="Weifeng Su &lt;suweifeng1@huawei.com&gt; 1.1-1" date="1669636800">- Upgrade dpu-utilities version to 1.1</changelog>
  <changelog author="Weifeng Su &lt;suweifeng1@huawei.com&gt; 1.1-2" date="1669896000">- add path put in xattr set</changelog>
  <changelog author="Weifeng Su &lt;suweifeng1@huawei.com&gt; 1.1-3" date="1670500800">- Sync patches from master</changelog>
  <changelog author="YangXin &lt;245051644@qq.com&gt; 1.1-4" date="1671105600">- Fix inode sync error between client and server.</changelog>
  <changelog author="Weifeng Su &lt;suweifeng1@huawei.com&gt; 1.3-1" date="1679400000">- Upgrade dpu-utilities version to 1.3</changelog>
</package>
<package pkgid="531eb03d09864bb04892a38aa7488cb6ad1eef7f1309be4d159a4e5d57c06e88" name="dpu-utilities" arch="src">
  <version epoch="0" ver="1.4" rel="2.oe2203sp1"/>
  <changelog author="yangxin &lt;245051644@qq.com&gt; 1.0-1" date="1660305600">- First Spec Version Include qtfs shared filesystem Driver Code</changelog>
  <changelog author="yangxin &lt;245051644@qq.com&gt; 1.0-2" date="1660737600">- Split dpu-utilities into three packages.</changelog>
  <changelog author="Weifeng Su &lt;suweifeng1@huawei.com&gt; 1.1-1" date="1669636800">- Upgrade dpu-utilities version to 1.1</changelog>
  <changelog author="Weifeng Su &lt;suweifeng1@huawei.com&gt; 1.1-2" date="1669896000">- add path put in xattr set</changelog>
  <changelog author="Weifeng Su &lt;suweifeng1@huawei.com&gt; 1.1-3" date="1670500800">- Sync patches from master</changelog>
  <changelog author="YangXin &lt;245051644@qq.com&gt; 1.1-4" date="1671105600">- Fix inode sync error between client and server.</changelog>
  <changelog author="Weifeng Su &lt;suweifeng1@huawei.com&gt; 1.3-1" date="1679400000">- Upgrade dpu-utilities version to 1.3</changelog>
  <changelog author="Weifeng Su &lt;suweifeng1@huawei.com&gt; 1.4-1" date="1685707200">- Upgrade dpu-utilities version to 1.4</changelog>
  <changelog author="Weifeng Su &lt;suweifeng1@huawei.com&gt; 1.4-2" date="1686571200">- Sync patches from source</changelog>
</package>
<package pkgid="9627c779993a8da9165b27cc0812f2478bcba17ce4368a7e31cd4b4f55c54065" name="e2fsprogs" arch="src">
  <version epoch="0" ver="1.46.4" rel="21.oe2203sp1"/>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 1.46.4-12" date="1656072000">- add sw64 patch</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 1.46.4-13" date="1660305600">- tune2fs: do not change j_tail_sequence in journal superblock</changelog>
  <changelog author="Zhiqiang Liu &lt;liuzhiqiang26@huawei.com&gt; - 1.46.4-14" date="1660996800">- debugfs: teach logdump the -n &lt;num_trans&gt; option</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 1.46.4-15" date="1663934400">- test: fix ACL-printing tests from community</changelog>
  <changelog author="Zhiqiang Liu &lt;liuzhiqiang26@huawei.com&gt; - 1.46.4-16" date="1665748800">- tune2fs: fix segfault problem</changelog>
  <changelog author="Zhiqiang Liu &lt;liuzhiqiang26@huawei.com&gt; - 1.46.4-17" date="1669896000">- fix deadlock problem in unix_write_blk64</changelog>
  <changelog author="lihaoxiang &lt;lihaoxiang9@huawei.com&gt; - 1.46.4-18" date="1675944000">- Upstream patches regress for debugfs, tune2fs and mmp.</changelog>
  <changelog author="Zhiqiang Liu &lt;liuzhiqiang26@huawei.com&gt; - 1.46.4-19" date="1680177600">- backport one patch to fix: processes may kill other processes in misc/fsck.c</changelog>
  <changelog author="tangyuchen &lt;tangyuchen5@huawei.com&gt; - 1.46.4-20" date="1686312000">- delete invalid link for ext4</changelog>
  <changelog author="suweifeng &lt;suweifeng1@huawei.com&gt; - 1.46.4-21" date="1687694400">- backport patches from upstream</changelog>
</package>
<package pkgid="f296b1d0f37f6bef39892fe6e72a1458368602f634e939c58ac3935a72b3e0d6" name="ebtables" arch="src">
  <version epoch="0" ver="2.0.11" rel="10.oe2203sp1"/>
  <changelog author="wangxiaopeng &lt;wangxiaopeng7@huawei.com&gt; - 2.0.11-3" date="1646827200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix string-icase can not work</changelog>
  <changelog author="wangxiaopeng &lt;wangxiaopeng7@huawei.com&gt; - 2.0.11-4" date="1648123200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:del broken lib</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 2.0.11-5" date="1656936000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix ebtables-config file access permisson
       fix ebt_print_error for prints null</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 2.0.11-6" date="1667476800">- Type:feature
- CVE:NA
- SUG:NA
- DESC:change lib64 to lib when in sw64 architecture</changelog>
  <changelog author="yanglu&lt;yanglu72@h-partners.com&gt; - 2.0.11-7" date="1669636800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:replace with tar from source0</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.0.11-8" date="1688126400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix install error</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 2.0.11-9" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix post error "No such file or directory"</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.0.11-10" date="1695211200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix: if libvirt and ebtables are installed at the same time, ping the operation prompts "sendmsg: Operation not permitted".</changelog>
</package>
<package pkgid="3aa548f2c7390b6d68a097c0ec7961bb483dab5c0ce2deec9393eeaf259604fd" name="ebtables" arch="src">
  <version epoch="0" ver="2.0.11" rel="11.oe2203sp1"/>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 2.0.11-6" date="1667476800">- Type:feature
- CVE:NA
- SUG:NA
- DESC:change lib64 to lib when in sw64 architecture</changelog>
  <changelog author="yanglu&lt;yanglu72@h-partners.com&gt; - 2.0.11-7" date="1669636800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:replace with tar from source0</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.0.11-8" date="1688126400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix install error</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 2.0.11-9" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix post error "No such file or directory"</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.0.11-10" date="1695211200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix: if libvirt and ebtables are installed at the same time, ping the operation prompts "sendmsg: Operation not permitted".</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.0.11-11" date="1722340800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix ebtables-restore --noflush failed when ebtables is uninstall</changelog>
</package>
<package pkgid="92154c9185edf34947c2901de29f614846cb13131a6a80aff392ae9e68054838" name="ebtables" arch="src">
  <version epoch="0" ver="2.0.11" rel="9.oe2203sp1"/>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 2.0.11-2" date="1631016000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:remove runpath of ebtables</changelog>
  <changelog author="wangxiaopeng &lt;wangxiaopeng7@huawei.com&gt; - 2.0.11-3" date="1646827200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix string-icase can not work</changelog>
  <changelog author="wangxiaopeng &lt;wangxiaopeng7@huawei.com&gt; - 2.0.11-4" date="1648123200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:del broken lib</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 2.0.11-5" date="1656936000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix ebtables-config file access permisson
       fix ebt_print_error for prints null</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 2.0.11-6" date="1667476800">- Type:feature
- CVE:NA
- SUG:NA
- DESC:change lib64 to lib when in sw64 architecture</changelog>
  <changelog author="yanglu&lt;yanglu72@h-partners.com&gt; - 2.0.11-7" date="1669636800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:replace with tar from source0</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.0.11-8" date="1688126400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix install error</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 2.0.11-9" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix post error "No such file or directory"</changelog>
</package>
<package pkgid="1798da52f2958dd117dbfc5585dfdabf6d96cfeec7d7ee8e3f02260867950aee" name="edk2" arch="src">
  <version epoch="0" ver="202011" rel="11.oe2203sp1"/>
  <changelog author="Jinhua Cao &lt;caojinhua1@huawei.com&gt; - 202011-2" date="1644926400">- fix CVE-2021-38576</changelog>
  <changelog author="Jinhua Cao &lt;caojinhua1@huawei.com&gt; - 202011-3" date="1645099200">- OvmfPkg: VirtioNetDxe: Extend the RxBufferSize to avoid data truncation</changelog>
  <changelog author="yezengruan &lt;yezengruan@huawei.com&gt; - 202011-4" date="1651060800">- update the format of changelog</changelog>
  <changelog author="miaoyubo &lt;miaoyubo@huawei.com&gt; - 202011-5" date="1655208000">- Enable TPM for pcr0-7</changelog>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-6" date="1664452800">* fix CVE-2019-11098</changelog>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-7" date="1669723200">- fix CVE-2021-38578</changelog>
  <changelog author="shaodenghui&lt;shaodenghui@huawei.com&gt; - 202011-8" date="1676894400">- fix CVE-2022-4450</changelog>
  <changelog author="shaodenghui&lt;shaodenghui@huawei.com&gt; - 202011-9" date="1677326400">- fix CVE-2023-0401</changelog>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-10" date="1677412800">- fix CVE-2023-0215</changelog>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-11" date="1677412801">- fix CVE-2023-0286</changelog>
</package>
<package pkgid="f9431cfb22589137bf6bd1279861f8811ff77de0b48d4ad8923234e209817e55" name="edk2" arch="src">
  <version epoch="0" ver="202011" rel="12.oe2203sp1"/>
</package>
<package pkgid="41aef13cde63e1237b9d84b5582ae6ce19f4081c8b2004bdd9d1bf20b15b201f" name="edk2" arch="src">
  <version epoch="0" ver="202011" rel="14.oe2203sp1"/>
  <changelog author="miaoyubo &lt;miaoyubo@huawei.com&gt; - 202011-5" date="1655208000">- Enable TPM for pcr0-7</changelog>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-6" date="1664452800">* fix CVE-2019-11098</changelog>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-7" date="1669723200">- fix CVE-2021-38578</changelog>
  <changelog author="shaodenghui&lt;shaodenghui@huawei.com&gt; - 202011-8" date="1676894400">- fix CVE-2022-4450</changelog>
  <changelog author="shaodenghui&lt;shaodenghui@huawei.com&gt; - 202011-9" date="1677326400">- fix CVE-2023-0401</changelog>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-10" date="1677412800">- fix CVE-2023-0215</changelog>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-11" date="1677412801">- fix CVE-2023-0286</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-12" date="1678449600">- fix CVE-2022-4304</changelog>
  <changelog author="Jiabo Feng&lt;fengjiabo1@huawei.com&gt; - 202011-13" date="1689249600">- solving the compilation failure problem of gcc 12.3.0</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-14" date="1708430400">- fix CVE-2023-0464、CVE-2023-0465、CVE-2023-0466、CVE-2023-2650、CVE-2023-3446、CVE-2023-3817、CVE-2024-0727</changelog>
</package>
<package pkgid="3019c6212583756d53bb95a9cca9450987e558e5a301816c5a4fc52f2221a33f" name="edk2" arch="src">
  <version epoch="0" ver="202011" rel="16.oe2203sp1"/>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-7" date="1669723200">- fix CVE-2021-38578</changelog>
  <changelog author="shaodenghui&lt;shaodenghui@huawei.com&gt; - 202011-8" date="1676894400">- fix CVE-2022-4450</changelog>
  <changelog author="shaodenghui&lt;shaodenghui@huawei.com&gt; - 202011-9" date="1677326400">- fix CVE-2023-0401</changelog>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-10" date="1677412800">- fix CVE-2023-0215</changelog>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-11" date="1677412801">- fix CVE-2023-0286</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-12" date="1678449600">- fix CVE-2022-4304</changelog>
  <changelog author="Jiabo Feng&lt;fengjiabo1@huawei.com&gt; - 202011-13" date="1689249600">- solving the compilation failure problem of gcc 12.3.0</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-14" date="1708430400">- fix CVE-2023-0464、CVE-2023-0465、CVE-2023-0466、CVE-2023-2650、CVE-2023-3446、CVE-2023-3817、CVE-2024-0727</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-15" date="1709640000">- fix CVE-2022-36763、CVE-2022-36764、CVE-2022-36765</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-16" date="1709812800">- fix CVE-2023-45229、CVE-2023-45230、CVE-2023-45231、CVE-2023-45232、CVE-2023-45233、CVE-2023-45234、CVE-2023-45235</changelog>
</package>
<package pkgid="72999be518a950823a52515c2221bf0a0be936abd11a21b6bb8690f4c5d416c2" name="edk2" arch="src">
  <version epoch="0" ver="202011" rel="17.oe2203sp1"/>
  <changelog author="shaodenghui&lt;shaodenghui@huawei.com&gt; - 202011-8" date="1676894400">- fix CVE-2022-4450</changelog>
  <changelog author="shaodenghui&lt;shaodenghui@huawei.com&gt; - 202011-9" date="1677326400">- fix CVE-2023-0401</changelog>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-10" date="1677412800">- fix CVE-2023-0215</changelog>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-11" date="1677412801">- fix CVE-2023-0286</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-12" date="1678449600">- fix CVE-2022-4304</changelog>
  <changelog author="Jiabo Feng&lt;fengjiabo1@huawei.com&gt; - 202011-13" date="1689249600">- solving the compilation failure problem of gcc 12.3.0</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-14" date="1708430400">- fix CVE-2023-0464、CVE-2023-0465、CVE-2023-0466、CVE-2023-2650、CVE-2023-3446、CVE-2023-3817、CVE-2024-0727</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-15" date="1709640000">- fix CVE-2022-36763、CVE-2022-36764、CVE-2022-36765</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-16" date="1709812800">- fix CVE-2023-45229、CVE-2023-45230、CVE-2023-45231、CVE-2023-45232、CVE-2023-45233、CVE-2023-45234、CVE-2023-45235</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-17" date="1713182400">- fix CVE-2024-2511</changelog>
</package>
<package pkgid="4c5622e584c4d77060954e8ca801e3d5f6a7455c9f077180e400e6d532726877" name="edk2" arch="src">
  <version epoch="0" ver="202011" rel="18.oe2203sp1"/>
  <changelog author="shaodenghui&lt;shaodenghui@huawei.com&gt; - 202011-9" date="1677326400">- fix CVE-2023-0401</changelog>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-10" date="1677412800">- fix CVE-2023-0215</changelog>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-11" date="1677412801">- fix CVE-2023-0286</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-12" date="1678449600">- fix CVE-2022-4304</changelog>
  <changelog author="Jiabo Feng&lt;fengjiabo1@huawei.com&gt; - 202011-13" date="1689249600">- solving the compilation failure problem of gcc 12.3.0</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-14" date="1708430400">- fix CVE-2023-0464、CVE-2023-0465、CVE-2023-0466、CVE-2023-2650、CVE-2023-3446、CVE-2023-3817、CVE-2024-0727</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-15" date="1709640000">- fix CVE-2022-36763、CVE-2022-36764、CVE-2022-36765</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-16" date="1709812800">- fix CVE-2023-45229、CVE-2023-45230、CVE-2023-45231、CVE-2023-45232、CVE-2023-45233、CVE-2023-45234、CVE-2023-45235</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-17" date="1713182400">- fix CVE-2024-2511</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-17" date="1718193600">- fix CVE-2024-1298</changelog>
</package>
<package pkgid="88d6ecd1ff72a18dfe6175f54513d050b902b522c92094498f2259583842daab" name="edk2" arch="src">
  <version epoch="0" ver="202011" rel="19.oe2203sp1"/>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-10" date="1677412800">- fix CVE-2023-0215</changelog>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-11" date="1677412801">- fix CVE-2023-0286</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-12" date="1678449600">- fix CVE-2022-4304</changelog>
  <changelog author="Jiabo Feng&lt;fengjiabo1@huawei.com&gt; - 202011-13" date="1689249600">- solving the compilation failure problem of gcc 12.3.0</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-14" date="1708430400">- fix CVE-2023-0464、CVE-2023-0465、CVE-2023-0466、CVE-2023-2650、CVE-2023-3446、CVE-2023-3817、CVE-2024-0727</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-15" date="1709640000">- fix CVE-2022-36763、CVE-2022-36764、CVE-2022-36765</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-16" date="1709812800">- fix CVE-2023-45229、CVE-2023-45230、CVE-2023-45231、CVE-2023-45232、CVE-2023-45233、CVE-2023-45234、CVE-2023-45235</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-17" date="1713182400">- fix CVE-2024-2511</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-18" date="1718193600">- fix CVE-2024-1298</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-19" date="1720699200">- fix CVE-2024-5535</changelog>
</package>
<package pkgid="7333965288c4f29d964710a58ace00cb5821639242ea7e7d22f84303f8792e82" name="edk2" arch="src">
  <version epoch="0" ver="202011" rel="20.oe2203sp1"/>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-11" date="1677412800">- fix CVE-2023-0286</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-12" date="1678449600">- fix CVE-2022-4304</changelog>
  <changelog author="Jiabo Feng&lt;fengjiabo1@huawei.com&gt; - 202011-13" date="1689249600">- solving the compilation failure problem of gcc 12.3.0</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-14" date="1708430400">- fix CVE-2023-0464、CVE-2023-0465、CVE-2023-0466、CVE-2023-2650、CVE-2023-3446、CVE-2023-3817、CVE-2024-0727</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-15" date="1709640000">- fix CVE-2022-36763、CVE-2022-36764、CVE-2022-36765</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-16" date="1709812800">- fix CVE-2023-45229、CVE-2023-45230、CVE-2023-45231、CVE-2023-45232、CVE-2023-45233、CVE-2023-45234、CVE-2023-45235</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-17" date="1713182400">- fix CVE-2024-2511</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-18" date="1718193600">- fix CVE-2024-1298</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-19" date="1720699200">- fix CVE-2024-5535</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-20" date="1725364800">- fix CVE-2021-3712、CVE-2022-0778</changelog>
</package>
<package pkgid="f0f52e0c3dfa945ef393738f0e060a7e63c85e833eef3eb125d5d5a83777f952" name="efibootmgr" arch="src">
  <version epoch="0" ver="18" rel="3.oe2203sp1"/>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 16-7" date="1622030400">- Add a BuildRequires for gcc</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 16-8" date="1623153600">- round community patches fix memory leak</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 17-1" date="1624276800">- update to 17</changelog>
  <changelog author="yangcheng &lt;yangcheng87@h-partners.com&gt; - 17-2" date="1650888000">- rebuild efibootmgr</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 18-1" date="1666094400">- update to verion 18</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 18-2" date="1669377600">- Fix the wrong url of Source0 and modify the name of the source tarball</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 18-3" date="1676894400">- get_entry: return entry if it was found before reaching the end of the list</changelog>
</package>
<package pkgid="751b8f044d365f6c54a84c810150531df1a2e1998b7e72fc0fe47de6bba7f909" name="efibootmgr" arch="src">
  <version epoch="0" ver="18" rel="4.oe2203sp1"/>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 16-7" date="1622030400">- Add a BuildRequires for gcc</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 16-8" date="1623153600">- round community patches fix memory leak</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 17-1" date="1624276800">- update to 17</changelog>
  <changelog author="yangcheng &lt;yangcheng87@h-partners.com&gt; - 17-2" date="1650888000">- rebuild efibootmgr</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 18-1" date="1666094400">- update to verion 18</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 18-2" date="1669377600">- Fix the wrong url of Source0 and modify the name of the source tarball</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 18-3" date="1676894400">- get_entry: return entry if it was found before reaching the end of the list</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 18-4" date="1678708800">- Fix segfault when passed --index is greater than current boot order size
  Add missing short option handling for --index (-I)</changelog>
</package>
<package pkgid="0b02e4e494a050219e78226291853ce370721c026a5e28083990f551386597fb" name="efibootmgr" arch="src">
  <version epoch="0" ver="18" rel="5.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 18-1" date="1666094400">- update to verion 18</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 18-2" date="1669377600">- Fix the wrong url of Source0 and modify the name of the source tarball</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 18-3" date="1676894400">- get_entry: return entry if it was found before reaching the end of the list</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 18-4" date="1678708800">- Fix segfault when passed --index is greater than current boot order size
  Add missing short option handling for --index (-I)</changelog>
  <changelog author="zhangxingrong &lt;zhangxingrong@uniontech.com&gt; - 18-5" date="1718625600">- Fix the incorrect long parameter in help messages
- efibootmgr: delete_bootnext is just a boolean, not an entry id</changelog>
</package>
<package pkgid="32be76f49b7c9ca32fb0ff9a3ece03ff74b33f7d3de8d29382452029325dc7d8" name="efivar" arch="src">
  <version epoch="0" ver="38" rel="3.oe2203sp1"/>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 37-7" date="1648123200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix efibootmgr -v error</changelog>
  <changelog author="mylee &lt;liweiganga@uniontech.com&gt; - 37-8" date="1652702400">- fix spec changelog date</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 37-9" date="1666180800">- Type:feature
- CVE:NA
- SUG:NA
- DESC:Add sw64 architecture</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 38-1" date="1667822400">- Type:requirements
- ID:NA
- SUG:NA
- DESC:update efivar to 38</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 38-2" date="1682510400">- ID:NA
- SUG:NA
- DESC:fix sw_64 build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 38-3" date="1694520000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:dp.h: check _ucs2size in format_ucs2()</changelog>
</package>
<package pkgid="c9324e555967a1d130eaa271218884c15546cbc9060af6cd0b39fdf8a62477db" name="efivar" arch="src">
  <version epoch="0" ver="38" rel="4.oe2203sp1"/>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 37-7" date="1648123200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix efibootmgr -v error</changelog>
  <changelog author="mylee &lt;liweiganga@uniontech.com&gt; - 37-8" date="1652702400">- fix spec changelog date</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 37-9" date="1666180800">- Type:feature
- CVE:NA
- SUG:NA
- DESC:Add sw64 architecture</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 38-1" date="1667822400">- Type:requirements
- ID:NA
- SUG:NA
- DESC:update efivar to 38</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 38-2" date="1682510400">- ID:NA
- SUG:NA
- DESC:fix sw_64 build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 38-3" date="1694520000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:dp.h: check _ucs2size in format_ucs2()</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 38-4" date="1710331200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Fix invalid free in main()</changelog>
</package>
<package pkgid="5a9bc6adba5b2c24d52c4c688a3a8dad5014d44568278d0004927610144c8f5e" name="emacs" arch="src">
  <version epoch="1" ver="27.2" rel="10.oe2203sp1"/>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 1:27.2-1" date="1626696000">- DESC: upgrade to 1:27.2</changelog>
  <changelog author="yanan &lt;yanan@huawei.com&gt; - 1:27.2-2" date="1628596800">- DESC: Fix FTBFS with glibc 2.34</changelog>
  <changelog author="yangcheng &lt;yangcheng87@huawei.com&gt; - 1:27.2-3" date="1628596801">- DESC: Fix the upgrade error caused by the info file in the emacs-help software package being repackaged</changelog>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 1:27.2-4" date="1642420800">- round self-developed patch</changelog>
  <changelog author="wangkeorng &lt;wangkeorng@huawei.com&gt; - 1:27.2-5" date="1654948800">- delete macro in changelog</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 1:27.2-6" date="1661515200">- close bootstrap with product_family</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 1:27.2-7" date="1668772800">- add loongarch support for emacs</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 1:27.2-8" date="1669896000">- fix CVE-2022-45939</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-9" date="1677153600">- fix CVE-2022-48337 CVE-2022-48338 CVE-2022-48339</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-10" date="1679659200">- fix CVE-2023-28617</changelog>
</package>
<package pkgid="5930163a8db53324d047542741c10b958db03c30b67a9c419638822f3707df26" name="emacs" arch="src">
  <version epoch="1" ver="27.2" rel="13.oe2203sp1"/>
  <changelog author="wangkeorng &lt;wangkeorng@huawei.com&gt; - 1:27.2-5" date="1654948800">- delete macro in changelog</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 1:27.2-6" date="1661515200">- close bootstrap with product_family</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 1:27.2-7" date="1668772800">- add loongarch support for emacs</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 1:27.2-8" date="1669896000">- fix CVE-2022-45939</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-9" date="1677153600">- fix CVE-2022-48337 CVE-2022-48338 CVE-2022-48339</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-10" date="1679659200">- fix CVE-2023-28617</changelog>
  <changelog author="leeffo &lt;liweiganga@uniontech.com&gt; - 1:27.2-11" date="1695643200">- fix CVE-2022-48337</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-12" date="1709208000">- fix emacs start slow</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 1:27.2-13" date="1711972800">- fix CVE-2024-30203 CVE-2024-30204 CVE-2024-30205</changelog>
</package>
<package pkgid="2d64344fe8dd08bb03b497a6888977b5aecb0db8fa93d79a4edfee5d1996dc09" name="emacs" arch="src">
  <version epoch="1" ver="27.2" rel="14.oe2203sp1"/>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 1:27.2-6" date="1661515200">- close bootstrap with product_family</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 1:27.2-7" date="1668772800">- add loongarch support for emacs</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 1:27.2-8" date="1669896000">- fix CVE-2022-45939</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-9" date="1677153600">- fix CVE-2022-48337 CVE-2022-48338 CVE-2022-48339</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-10" date="1679659200">- fix CVE-2023-28617</changelog>
  <changelog author="leeffo &lt;liweiganga@uniontech.com&gt; - 1:27.2-11" date="1695643200">- fix CVE-2022-48337</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-12" date="1709208000">- fix emacs start slow</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 1:27.2-13" date="1711972800">- fix CVE-2024-30203 CVE-2024-30204 CVE-2024-30205</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-14" date="1719921600">- fix CVE-2024-39331</changelog>
</package>
<package pkgid="49703d12782aca1b5025972de47dec07e430527e21afebd7d96cb041f9178c5d" name="emacs" arch="src">
  <version epoch="1" ver="27.2" rel="9.oe2203sp1"/>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 1:27.2-1" date="1626696000">- DESC: upgrade to 1:27.2</changelog>
  <changelog author="yanan &lt;yanan@huawei.com&gt; - 1:27.2-2" date="1628596800">- DESC: Fix FTBFS with glibc 2.34</changelog>
  <changelog author="yangcheng &lt;yangcheng87@huawei.com&gt; - 1:27.2-3" date="1628596801">- DESC: Fix the upgrade error caused by the info file in the emacs-help software package being repackaged</changelog>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 1:27.2-4" date="1642420800">- round self-developed patch</changelog>
  <changelog author="wangkeorng &lt;wangkeorng@huawei.com&gt; - 1:27.2-5" date="1654948800">- delete macro in changelog</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 1:27.2-6" date="1661515200">- close bootstrap with product_family</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 1:27.2-7" date="1668772800">- add loongarch support for emacs</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 1:27.2-8" date="1669896000">- fix CVE-2022-45939</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-9" date="1677153600">- fix CVE-2022-48337 CVE-2022-48338 CVE-2022-48339</changelog>
</package>
<package pkgid="f4aa753a2c5a576b42bbcf211975b474ca0a6bceae5589b1f289d4767cf9e654" name="epiphany" arch="src">
  <version epoch="1" ver="40.6" rel="3.oe2203sp1"/>
  <changelog author="Wenlong Ding &lt;wenlong.ding@turbolinux.com.cn&gt; - 3.38.5-1" date="1624536000">- Update to 3.38.5</changelog>
  <changelog author="lingsheng &lt;lingsheng@huawei.com&gt; - 3.38.5-2" date="1631275200">- Delete rpath setting</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 40.6-1" date="1651838400">- Update to 40.6 for fix CVE-2021-45085-to-CVE-2021-45088 and add patch for CVE-2022-29536</changelog>
  <changelog author="lin zhang &lt;lin.zhang@turbolinux.com.cn&gt; 1:40.6-2" date="1662724800">- fix issue #I5QHPI</changelog>
  <changelog author="liweiganga &lt;liweiganga@uniontech.com&gt; 1:40.6-3" date="1677153600">- fix CVE-2023-26081</changelog>
</package>
<package pkgid="151a5ccfcf6d1d6cbbafd8e1ed5668fbabdb28ce809a148a0e2a5ac15debde4f" name="erlang" arch="src">
  <version epoch="0" ver="23.3.4.9" rel="3.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 21.3.3-4" date="1641816000">- fix build error for autoconf 2.71</changelog>
  <changelog author="Ge Wang &lt;wangge20@huawei.com&gt; - 23.3.4.9-1" date="1642507200">- Update to version 23.4.4.9</changelog>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
</package>
<package pkgid="15c1dd1871ec86176b9798a8448fb42da943704e99b629a419c6e2f2d8054bd0" name="erlang" arch="src">
  <version epoch="0" ver="23.3.4.9" rel="4.oe2203sp1"/>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
</package>
<package pkgid="0703a6df83e583d12133371401edab897e348586dfa76dbc226e1be712a002ea" name="espeak-ng" arch="src">
  <version epoch="0" ver="1.51" rel="2.oe2203sp1"/>
  <changelog author="Ge Wang &lt;wang__ge@126.com&gt; - 1.51-1" date="1697716800">- Update to version 1.51</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.51-2" date="1703764800">- Fix CVE-2023-49990~CVE-2023-49994</changelog>
</package>
<package pkgid="c0266ee32b41ba8a65ba810a0639e95fea54614c2a64c6be8b1f752358a15dbd" name="expat" arch="src">
  <version epoch="0" ver="2.4.1" rel="10.oe2203sp1"/>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 2.4.1-6" date="1663243200">- fix CVE-2022-40674</changelog>
  <changelog author="huangduirong &lt;huangduirong@huawei.com&gt; - 2.4.1-7" date="1665489600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Move autoreconf to build</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.4.1-8" date="1667044800">- fix CVE-2022-43680</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 2.4.1-9" date="1711368000">- fix CVE-2024-28757</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 2.4.1-10" date="1711368001">- fix CVE-2023-52426</changelog>
</package>
<package pkgid="b2cf5913befec01151b202b9de97294d9ab156360643157cddb8f9fc8a83808e" name="expat" arch="src">
  <version epoch="0" ver="2.4.1" rel="11.oe2203sp1"/>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 2.4.1-6" date="1663243200">- fix CVE-2022-40674</changelog>
  <changelog author="huangduirong &lt;huangduirong@huawei.com&gt; - 2.4.1-7" date="1665489600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Move autoreconf to build</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.4.1-8" date="1667044800">- fix CVE-2022-43680</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 2.4.1-9" date="1711368000">- fix CVE-2024-28757</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 2.4.1-10" date="1711368001">- fix CVE-2023-52426</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 2.4.1-11" date="1712836800">- fix CVE-2023-52425</changelog>
</package>
<package pkgid="3f0ad300a6f8cb9a30662c0f74ce7947aedd7419d892e600d12afd04e680f19c" name="expat" arch="src">
  <version epoch="0" ver="2.4.1" rel="12.oe2203sp1"/>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 2.4.1-6" date="1663243200">- fix CVE-2022-40674</changelog>
  <changelog author="huangduirong &lt;huangduirong@huawei.com&gt; - 2.4.1-7" date="1665489600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Move autoreconf to build</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.4.1-8" date="1667044800">- fix CVE-2022-43680</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 2.4.1-9" date="1711368000">- fix CVE-2024-28757</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 2.4.1-10" date="1711368001">- fix CVE-2023-52426</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 2.4.1-11" date="1712836800">- fix CVE-2023-52425</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 2.4.1-12" date="1725364800">- fix CVE-2024-45490</changelog>
</package>
<package pkgid="0598aeba773441046975ed47cc57d99e641d8a57fee38a3209628fe94296f2c9" name="expat" arch="src">
  <version epoch="0" ver="2.4.1" rel="13.oe2203sp1"/>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 2.4.1-6" date="1663243200">- fix CVE-2022-40674</changelog>
  <changelog author="huangduirong &lt;huangduirong@huawei.com&gt; - 2.4.1-7" date="1665489600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Move autoreconf to build</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.4.1-8" date="1667044800">- fix CVE-2022-43680</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 2.4.1-9" date="1711368000">- fix CVE-2024-28757</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 2.4.1-10" date="1711368001">- fix CVE-2023-52426</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 2.4.1-11" date="1712836800">- fix CVE-2023-52425</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 2.4.1-12" date="1725364800">- fix CVE-2024-45490</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.4.1-13" date="1725451200">- fix CVE-2024-45491, CVE-2024-45492</changelog>
</package>
<package pkgid="443b8a3f5b3c303ec2cb417deb104fde36348cdcc91b993bef1b6d2587840ec3" name="expect" arch="src">
  <version epoch="1" ver="5.45.4" rel="8.oe2203sp1"/>
  <changelog author="yangzhao1 &lt;yangzhao1@kylinos.cn&gt; - 1:5.45.4-7" date="1654776000">- Remove unnecessary Buildrequires git</changelog>
  <changelog author="hongjinghao &lt;hongjinghao@huawei.com&gt; - 1:5.45.4-8" date="1708603200">- remove rpath and runpath of exec files and libraries</changelog>
</package>
<package pkgid="fdfa048ae05ff21293feff33a24ffcf5f178b625bb013ac0297327893637a73f" name="fdupes" arch="src">
  <version epoch="1" ver="2.3.0" rel="1.oe2203sp1"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:2.3.0-1" date="1714305600">- Update to 2.3.0 for fix CVE-2022-48682
- Add ncurses mode for interactive file deletion (plain mode still available via --plain or ./configure).
- Add --minsize --maxsize --time --order=ctime --log --deferconfirmation --cache option.
- Use configure script for installation (Autotools/Automake).
- Rename cs command ("clear all selections") from cs to csel.
- Rename igs command ("invert selections") from igs to isel.
- Add "prune" command as synonym for DELETE key.
- Clear selections after deleting files via prune/DELETE.
- Fix dependency issues when fdupes is configured to not use ncurses.
- Do not enter ncurses mode when --immediate option given.</changelog>
</package>
<package pkgid="e5b3d541e80b721e201c5365f81c6223fc539d6f7db7e40f0ba644608c704b95" name="fence-agents" arch="src">
  <version epoch="0" ver="4.2.1" rel="33.oe2203sp1"/>
  <changelog author="bizhiyuan &lt;bizhiyuan@kylinos.cn&gt; - 4.2.1-33" date="1726228800">- fix for CVE-2023-52323</changelog>
</package>
<package pkgid="2aae562ddfb2a0714c80f27a4ebd6de45a66c088a39b21cd352fac4c9a6704b8" name="ffmpeg" arch="src">
  <version epoch="0" ver="4.2.4" rel="12.oe2203sp1"/>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 4.2.4-5" date="1714564800">- fix CVE-2024-31578</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-6" date="1718798400">- Fix CVE-2023-51794</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-7" date="1719316800">- Fix CVE-2023-51798</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-8" date="1719316801">- Fix CVE-2022-3341</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-9" date="1719403200">- Fix CVE-2022-3109</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-10" date="1719921600">- Fix CVE-2023-51793</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-11" date="1719921601">- Fix CVE-2023-50010</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-12" date="1719921602">- Fix CVE-2021-38171</changelog>
</package>
<package pkgid="b55552f4079e5cb968d39a445b00d37eadb0ffb9423ef685c5879db815353d6d" name="ffmpeg" arch="src">
  <version epoch="0" ver="4.2.4" rel="14.oe2203sp1"/>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 4.2.4-5" date="1714564800">- fix CVE-2024-31578</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-6" date="1718798400">- Fix CVE-2023-51794</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-7" date="1719316800">- Fix CVE-2023-51798</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-8" date="1719316801">- Fix CVE-2022-3341</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-9" date="1719403200">- Fix CVE-2022-3109</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-10" date="1719921600">- Fix CVE-2023-51793</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-11" date="1719921601">- Fix CVE-2023-50010</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-12" date="1719921602">- Fix CVE-2021-38171</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-13" date="1720094400">- Fix CVE-2021-28429</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-14" date="1720612800">- The automatic compilation function is enabled for access control</changelog>
</package>
<package pkgid="f75bc07d26d910e186123c79b5890617beb107c0612921fbee35508c45b13e67" name="ffmpeg" arch="src">
  <version epoch="0" ver="4.2.4" rel="17.oe2203sp1"/>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-8" date="1719316800">- Fix CVE-2022-3341</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-9" date="1719403200">- Fix CVE-2022-3109</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-10" date="1719921600">- Fix CVE-2023-51793</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-11" date="1719921601">- Fix CVE-2023-50010</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-12" date="1719921602">- Fix CVE-2021-38171</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-13" date="1720094400">- Fix CVE-2021-28429</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-14" date="1720612800">- The automatic compilation function is enabled for access control</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-15" date="1720612801">- Fix CVE-2024-32230</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-16" date="1720785600">- Fix CVE-2022-1475</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-17" date="1721044800">- Fix CVE-2022-48434</changelog>
</package>
<package pkgid="801613bb38acbb0910ac3a67090100568c47adc77c709899266ec724fb4aa2b3" name="ffmpeg" arch="src">
  <version epoch="0" ver="4.2.4" rel="18.oe2203sp1"/>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-9" date="1719403200">- Fix CVE-2022-3109</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-10" date="1719921600">- Fix CVE-2023-51793</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-11" date="1719921601">- Fix CVE-2023-50010</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-12" date="1719921602">- Fix CVE-2021-38171</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-13" date="1720094400">- Fix CVE-2021-28429</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-14" date="1720612800">- The automatic compilation function is enabled for access control</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-15" date="1720612801">- Fix CVE-2024-32230</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-16" date="1720785600">- Fix CVE-2022-1475</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-17" date="1721044800">- Fix CVE-2022-48434</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-18" date="1726660800">- Fix CVE-2020-35965.patch</changelog>
</package>
<package pkgid="0caddae2efead29add2cda0213fa8f7140d326b9791b4c9efe5b401a45bc914d" name="ffmpeg" arch="src">
  <version epoch="0" ver="4.2.4" rel="8.oe2203sp1"/>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 4.2.4-5" date="1714564800">- fix CVE-2024-31578</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-6" date="1718798400">- Fix CVE-2023-51794</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-7" date="1719316800">- Fix CVE-2023-51798</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-8" date="1719316801">- Fix CVE-2022-3341</changelog>
</package>
<package pkgid="946325798630a423929ce530820860b4e66c60c1eb73e89529d924a3ec23f8e5" name="file" arch="src">
  <version epoch="0" ver="5.41" rel="3.oe2203sp1"/>
  <changelog author="yanglongkang &lt;yanglongkang@huawei.com&gt; - 5.41-1" date="1637928000">- update to 5.41</changelog>
  <changelog author="lihaoxiang &lt;lihaoxiang9@huawei.com&gt; - 5.41-2" date="1666180800">- fix typos fxlb</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 5.41-3" date="1692792000">- fix CVE-2022-48554</changelog>
</package>
<package pkgid="f4ad44f03f5022f62242e451563915c50139b5044f4b939d4d6af82658603c9f" name="firefox" arch="src">
  <version epoch="0" ver="102.11.0" rel="2.oe2203sp1"/>
  <changelog author="caodongxia &lt;caodongxia@huawei.com&gt; - 79.0-7" date="1625486400">- Fix build with pipewire 0.3</changelog>
  <changelog author="lingsheng &lt;lingsheng@huawei.com&gt; - 79.0-8" date="1625659200">- Fix firefox video tab crash with rust 1.51</changelog>
  <changelog author="caodongxia &lt;caodongxia@huawei.com&gt; - 79.0-9" date="1628683200">- Fix glibc dynstack</changelog>
  <changelog author="lingsheng &lt;lingsheng@huawei.com&gt; - 79.0-10" date="1629720000">- Fix firefox tab crash with clone3 in glibc 2.34</changelog>
  <changelog author="baizhonggui &lt;baizhonggui@huawei.com&gt; - 79.0-11" date="1641902400">- Fix firefox wl_proxy_marshal_flags undefine.</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 79.0-12" date="1647518400">- Added expat backports of CVE-2022-25235, CVE-2022-25236 and CVE-2022-25315</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 79.0-13" date="1666267200">- Fix for expat CVE-2022-40674</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.9.0-1" date="1683374400">- Update to 102.9.0</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.11.0-1" date="1684152000">- Update to 102.11.0</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 102.11.0-2" date="1684238400">- Modify error source1</changelog>
</package>
<package pkgid="852c4cd9794c4a7a80ba2aa3df92a001abd8e279ac313d03ae909d09c83da1c9" name="firefox" arch="src">
  <version epoch="0" ver="102.14.0" rel="1.oe2203sp1"/>
  <changelog author="lingsheng &lt;lingsheng@huawei.com&gt; - 79.0-10" date="1629720000">- Fix firefox tab crash with clone3 in glibc 2.34</changelog>
  <changelog author="baizhonggui &lt;baizhonggui@huawei.com&gt; - 79.0-11" date="1641902400">- Fix firefox wl_proxy_marshal_flags undefine.</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 79.0-12" date="1647518400">- Added expat backports of CVE-2022-25235, CVE-2022-25236 and CVE-2022-25315</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 79.0-13" date="1666267200">- Fix for expat CVE-2022-40674</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.9.0-1" date="1683374400">- Update to 102.9.0</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.11.0-1" date="1684152000">- Update to 102.11.0</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 102.11.0-2" date="1684238400">- Modify error source1</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.11.0-3" date="1684756800">- Modify buildrequires rust version to 1.60</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.13.0-1" date="1688644800">- Update to 102.13.0
- Fix CVE-2023-34416 CVE-2023-34414 CVE-2023-37201 CVE-2023-37202 CVE-2023-37207 CVE-2023-37208 CVE-2023-37211
- Remove unused patch</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.14.0-1" date="1691496000">- Update to 102.14.0
- Fix CVE-2023-4045 CVE-2023-4046 CVE-2023-4047 CVE-2023-4048 CVE-2023-4049 CVE-2023-4050 CVE-2023-4054 CVE-2023-4055 CVE-2023-4056</changelog>
</package>
<package pkgid="aa8ad48b71542e35d00748d50a30c695708ed87053cc34dc51429ecc27fac90e" name="firefox" arch="src">
  <version epoch="0" ver="102.15.0" rel="2.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 79.0-12" date="1647518400">- Added expat backports of CVE-2022-25235, CVE-2022-25236 and CVE-2022-25315</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 79.0-13" date="1666267200">- Fix for expat CVE-2022-40674</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.9.0-1" date="1683374400">- Update to 102.9.0</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.11.0-1" date="1684152000">- Update to 102.11.0</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 102.11.0-2" date="1684238400">- Modify error source1</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.11.0-3" date="1684756800">- Modify buildrequires rust version to 1.60</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.13.0-1" date="1688644800">- Update to 102.13.0
- Fix CVE-2023-34416 CVE-2023-34414 CVE-2023-37201 CVE-2023-37202 CVE-2023-37207 CVE-2023-37208 CVE-2023-37211
- Remove unused patch</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.14.0-1" date="1691496000">- Update to 102.14.0
- Fix CVE-2023-4045 CVE-2023-4046 CVE-2023-4047 CVE-2023-4048 CVE-2023-4049 CVE-2023-4050 CVE-2023-4054 CVE-2023-4055 CVE-2023-4056</changelog>
  <changelog author="lvfei &lt;lvfei@kylinos.cn&gt; - 102.15.0-1" date="1695211200">- Update to 102.15.0
- Fix CVE-2023-4573 CVE-2023-4574 CVE-2023-4575 CVE-2023-4576  CVE-2023-4581 CVE-2023-4584</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.15.0-2" date="1695902400">- Fix for libwebp CVE-2023-4863</changelog>
</package>
<package pkgid="7cf67c00f1b46f813c88b09dd173817140df129117e6de6cb4e6df0b6a967dfe" name="firefox" arch="src">
  <version epoch="0" ver="102.15.0" rel="3.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 79.0-13" date="1666267200">- Fix for expat CVE-2022-40674</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.9.0-1" date="1683374400">- Update to 102.9.0</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.11.0-1" date="1684152000">- Update to 102.11.0</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 102.11.0-2" date="1684238400">- Modify error source1</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.11.0-3" date="1684756800">- Modify buildrequires rust version to 1.60</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.13.0-1" date="1688644800">- Update to 102.13.0
- Fix CVE-2023-34416 CVE-2023-34414 CVE-2023-37201 CVE-2023-37202 CVE-2023-37207 CVE-2023-37208 CVE-2023-37211
- Remove unused patch</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.14.0-1" date="1691496000">- Update to 102.14.0
- Fix CVE-2023-4045 CVE-2023-4046 CVE-2023-4047 CVE-2023-4048 CVE-2023-4049 CVE-2023-4050 CVE-2023-4054 CVE-2023-4055 CVE-2023-4056</changelog>
  <changelog author="lvfei &lt;lvfei@kylinos.cn&gt; - 102.15.0-1" date="1695211200">- Update to 102.15.0
- Fix CVE-2023-4573 CVE-2023-4574 CVE-2023-4575 CVE-2023-4576  CVE-2023-4581 CVE-2023-4584</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.15.0-2" date="1695902400">- Fix for libwebp CVE-2023-4863</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 102.15.0-3" date="1698321600">- Fix for libvpx CVE-2023-5217</changelog>
</package>
<package pkgid="1d2ed1b7fb3d6b8ea25273cd5fac7eeb2a3f773c16777643f101f4f438d5c20f" name="firefox" arch="src">
  <version epoch="0" ver="102.15.0" rel="4.oe2203sp1"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.9.0-1" date="1683374400">- Update to 102.9.0</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.11.0-1" date="1684152000">- Update to 102.11.0</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 102.11.0-2" date="1684238400">- Modify error source1</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.11.0-3" date="1684756800">- Modify buildrequires rust version to 1.60</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.13.0-1" date="1688644800">- Update to 102.13.0
- Fix CVE-2023-34416 CVE-2023-34414 CVE-2023-37201 CVE-2023-37202 CVE-2023-37207 CVE-2023-37208 CVE-2023-37211
- Remove unused patch</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.14.0-1" date="1691496000">- Update to 102.14.0
- Fix CVE-2023-4045 CVE-2023-4046 CVE-2023-4047 CVE-2023-4048 CVE-2023-4049 CVE-2023-4050 CVE-2023-4054 CVE-2023-4055 CVE-2023-4056</changelog>
  <changelog author="lvfei &lt;lvfei@kylinos.cn&gt; - 102.15.0-1" date="1695211200">- Update to 102.15.0
- Fix CVE-2023-4573 CVE-2023-4574 CVE-2023-4575 CVE-2023-4576  CVE-2023-4581 CVE-2023-4584</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.15.0-2" date="1695902400">- Fix for libwebp CVE-2023-4863</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 102.15.0-3" date="1698321600">- Fix for libvpx CVE-2023-5217</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.15.0-4" date="1704196800">- Fix CVE-2023-7104</changelog>
</package>
<package pkgid="5d0152e5302a0801e951e4253c05d4a435e4668bf4daef906e81a7bb543f153d" name="firefox" arch="src">
  <version epoch="0" ver="102.15.0" rel="5.oe2203sp1"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.11.0-1" date="1684152000">- Update to 102.11.0</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 102.11.0-2" date="1684238400">- Modify error source1</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.11.0-3" date="1684756800">- Modify buildrequires rust version to 1.60</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.13.0-1" date="1688644800">- Update to 102.13.0
- Fix CVE-2023-34416 CVE-2023-34414 CVE-2023-37201 CVE-2023-37202 CVE-2023-37207 CVE-2023-37208 CVE-2023-37211
- Remove unused patch</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.14.0-1" date="1691496000">- Update to 102.14.0
- Fix CVE-2023-4045 CVE-2023-4046 CVE-2023-4047 CVE-2023-4048 CVE-2023-4049 CVE-2023-4050 CVE-2023-4054 CVE-2023-4055 CVE-2023-4056</changelog>
  <changelog author="lvfei &lt;lvfei@kylinos.cn&gt; - 102.15.0-1" date="1695211200">- Update to 102.15.0
- Fix CVE-2023-4573 CVE-2023-4574 CVE-2023-4575 CVE-2023-4576  CVE-2023-4581 CVE-2023-4584</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.15.0-2" date="1695902400">- Fix for libwebp CVE-2023-4863</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 102.15.0-3" date="1698321600">- Fix for libvpx CVE-2023-5217</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.15.0-4" date="1704196800">- Fix CVE-2023-7104</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 102.15.0-5" date="1709035200">- Fix CVE-2022-3479</changelog>
</package>
<package pkgid="52d567ff42d0e72f06cfa54e0a13b4be08f55fba8e714b1a80c48a659faf7678" name="firefox" arch="src">
  <version epoch="0" ver="102.15.0" rel="6.oe2203sp1"/>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 102.11.0-2" date="1684238400">- Modify error source1</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.11.0-3" date="1684756800">- Modify buildrequires rust version to 1.60</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.13.0-1" date="1688644800">- Update to 102.13.0
- Fix CVE-2023-34416 CVE-2023-34414 CVE-2023-37201 CVE-2023-37202 CVE-2023-37207 CVE-2023-37208 CVE-2023-37211
- Remove unused patch</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.14.0-1" date="1691496000">- Update to 102.14.0
- Fix CVE-2023-4045 CVE-2023-4046 CVE-2023-4047 CVE-2023-4048 CVE-2023-4049 CVE-2023-4050 CVE-2023-4054 CVE-2023-4055 CVE-2023-4056</changelog>
  <changelog author="lvfei &lt;lvfei@kylinos.cn&gt; - 102.15.0-1" date="1695211200">- Update to 102.15.0
- Fix CVE-2023-4573 CVE-2023-4574 CVE-2023-4575 CVE-2023-4576  CVE-2023-4581 CVE-2023-4584</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.15.0-2" date="1695902400">- Fix for libwebp CVE-2023-4863</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 102.15.0-3" date="1698321600">- Fix for libvpx CVE-2023-5217</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.15.0-4" date="1704196800">- Fix CVE-2023-7104</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 102.15.0-5" date="1709035200">- Fix CVE-2022-3479</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.15.0-6" date="1713873600">- Fix CVE-2023-44488</changelog>
</package>
<package pkgid="d4b661e45ba5e78b9345015349e03124a733af489b03fa6cd374ea0d3edc3734" name="firefox" arch="src">
  <version epoch="0" ver="102.15.0" rel="7.oe2203sp1"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.11.0-3" date="1684756800">- Modify buildrequires rust version to 1.60</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.13.0-1" date="1688644800">- Update to 102.13.0
- Fix CVE-2023-34416 CVE-2023-34414 CVE-2023-37201 CVE-2023-37202 CVE-2023-37207 CVE-2023-37208 CVE-2023-37211
- Remove unused patch</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.14.0-1" date="1691496000">- Update to 102.14.0
- Fix CVE-2023-4045 CVE-2023-4046 CVE-2023-4047 CVE-2023-4048 CVE-2023-4049 CVE-2023-4050 CVE-2023-4054 CVE-2023-4055 CVE-2023-4056</changelog>
  <changelog author="lvfei &lt;lvfei@kylinos.cn&gt; - 102.15.0-1" date="1695211200">- Update to 102.15.0
- Fix CVE-2023-4573 CVE-2023-4574 CVE-2023-4575 CVE-2023-4576  CVE-2023-4581 CVE-2023-4584</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.15.0-2" date="1695902400">- Fix for libwebp CVE-2023-4863</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 102.15.0-3" date="1698321600">- Fix for libvpx CVE-2023-5217</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.15.0-4" date="1704196800">- Fix CVE-2023-7104</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 102.15.0-5" date="1709035200">- Fix CVE-2022-3479</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.15.0-6" date="1713873600">- Fix CVE-2023-44488</changelog>
  <changelog author="lvfei &lt;lvfei@kylinos.cn&gt; - 102.15.0-7" date="1724760000">- Fix CVE-2024-0745</changelog>
</package>
<package pkgid="96fcff95a7c00c71668e79d0fd5d1e88115274ce36a70fc368bf7b880ab05bdc" name="firewalld" arch="src">
  <version epoch="0" ver="1.0.2" rel="10.oe2203sp1"/>
  <changelog author="xinghe &lt;xinghe2@h-partnres.com&gt; - 1.0.2-4" date="1662033600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix zone combined forward must not default to True
       fix fw icmptype don't alter ipvs in io_object
       fix check config use the dictionary variants
       fix functions check config fails if direct.xml exists
       fix service adding includes</changelog>
  <changelog author="luoqing &lt;luoqing@kylinsec.com.cn&gt; - 1.0.2-5" date="1668427200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Specify the translation encoding format as UTF-8</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 1.0.2-6" date="1695729600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:chore nftables add delete table helper
       nftables always flush main table on start</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 1.0.2-7" date="1701172800">- Type:requirement
- ID:NA
- SUG:NA
- DESC:Firewall startup is to set CleanupModuleOnxit=yes to unload
       related ko when stopping firewalld service</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 1.0.2-8" date="1717761600">- Type:requirement
- ID:NA
- SUG:NA
- DESC:To reduce unnecessary loading of ebtables-related kernel modules</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 1.0.2-9" date="1720180800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix(nm): release NM client after a timeout</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 1.0.2-10" date="1720180801">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix unintentinally exclude file</changelog>
</package>
<package pkgid="e96e6aa0cb32b7b5866b65fd403271b825bcf643c742891c1cade2d8afb8cd49" name="flac" arch="src">
  <version epoch="0" ver="1.3.4" rel="2.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@huawei.com&gt; - 1.3.3-2" date="1648728000">- fix CVE-2021-0561</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1.3.3-3" date="1650801600">- enable makecheck</changelog>
  <changelog author="volcanodragon &lt;linfeilong@huawei.com&gt; - 1.3.3-4" date="1651060800">- disable check to avoid build error</changelog>
  <changelog author="volcanodragon &lt;linfeilong@huawei.com&gt; - 1.3.3-5" date="1651060801">- rebuild package</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1.3.3-6" date="1653739200">- fix CVE-2020-0499</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 1.3.3-7" date="1666180800">- add sw64 patch</changelog>
  <changelog author="chenhaixiang&lt;chenhaixiang3@huawei.com&gt; - 1.3.4-1" date="1667995200">- update to 1.3.4</changelog>
  <changelog author="chenhaixiang&lt;chenhaixiang3@huawei.com&gt; - 1.3.4-2" date="1693310400">- fix CVE-2020-22219</changelog>
</package>
<package pkgid="e5b94cc7cdcc5d0ccace42acf0742fb8c321fac0b6e0b3ebc1c00f775dbb65e8" name="flatpak" arch="src">
  <version epoch="0" ver="1.10.2" rel="7.oe2203sp1"/>
  <changelog author="maokecheng &lt;maokecheng@xfusion.com&gt; - 1.10.2-6" date="1703592000">- DESC:Fix several memory leaks</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1.10.2-7" date="1711627200">- Fix CVE-2023-28100 and CVE-2023-28101</changelog>
</package>
<package pkgid="add5eb4ee0634c775849a4440ae78278aa938a3924703b74d252d60abebb7b01" name="flatpak" arch="src">
  <version epoch="0" ver="1.10.2" rel="8.oe2203sp1"/>
  <changelog author="maokecheng &lt;maokecheng@xfusion.com&gt; - 1.10.2-6" date="1703592000">- DESC:Fix several memory leaks</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1.10.2-7" date="1711627200">- Fix CVE-2023-28100 and CVE-2023-28101</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.10.2-8" date="1713528000">- Fix CVE-2024-32462</changelog>
</package>
<package pkgid="fb1bb03a7d235617823cee470f7096ca8ccf5dae79f0a76f7d59fd9fd902cb98" name="flatpak" arch="src">
  <version epoch="0" ver="1.10.2" rel="9.oe2203sp1"/>
  <changelog author="maokecheng &lt;maokecheng@xfusion.com&gt; - 1.10.2-6" date="1703592000">- DESC:Fix several memory leaks</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1.10.2-7" date="1711627200">- Fix CVE-2023-28100 and CVE-2023-28101</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.10.2-8" date="1713528000">- Fix CVE-2024-32462</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.10.2-9" date="1723723200">- Fix CVE-2024-42472</changelog>
</package>
<package pkgid="62b8b9754a3cc41a5f6db3c40969f5f43e99b8c1160870d48073ef81a1cdfca5" name="fontforge" arch="src">
  <version epoch="0" ver="20200314" rel="8.oe2203sp1"/>
  <changelog author="wulei &lt;wulei80@h-partners.com&gt; - 20200314-7" date="1668427200">- Modifying the source code package address</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 20200314-8" date="1709035200">- Fix CVE-2024-25081 and CVE-2024-25082</changelog>
</package>
<package pkgid="c3f0851bcf49aa63957b249c58c5125042ff6b016cc3e20bb389cc0534b68a06" name="fop" arch="src">
  <version epoch="0" ver="2.2" rel="7.oe2203sp1"/>
  <changelog author="xu_ping &lt;xuping33@h-partners.com&gt; - 2.2-6" date="1669032000">- Modify invalid source</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.2-7" date="1694174400">- Fix build failure caused by batik upgrade to 1.17</changelog>
</package>
<package pkgid="c706458ccf6e6638cf1260ffa1b7779f28861edacedbc2e7f53766366ecab6b7" name="freeglut" arch="src">
  <version epoch="0" ver="3.0.0" rel="12.oe2203sp1"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.0.0-12" date="1708257600">- Fix CVE-2024-24258 and CVE-2024-24259</changelog>
</package>
<package pkgid="36f2230bed069ee063163696fdb3ebffe6c26551164719f7b7f77aaabc9a4826" name="freeradius" arch="src">
  <version epoch="0" ver="3.0.25" rel="3.oe2203sp1"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 3.0.25-2" date="1671624000">- Fix CVE-2022-41859 and CVE-2022-41860 and CVE-2022-41861</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.0.25-3" date="1721131200">- Fix CVE-2024-3596</changelog>
</package>
<package pkgid="93c5069a70cc71b9d5e994d56c385599bf89f44cb124390b9961358907a4d983" name="freerdp" arch="src">
  <version epoch="2" ver="2.11.1" rel="1.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 2:2.4.1-1" date="1635854400">- Upgrade freerdp to 2.4.1 for fix CVE-2021-41159, CVE-2021-41160</changelog>
  <changelog author="lingsheng &lt;lingsheng@huawei.com&gt; - 2:2.4.1-2" date="1636372800">- Add ldconfig config file to fix freerdp-proxy dynamic library dependency</changelog>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 2:2.7.0-1" date="1651924800">- Upgrade to 2.7.0
- Fix CVE-2022-24882 CVE-2022-24883</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 2:2.8.1-1" date="1666267200">- Upgrade to 2.8.1
- Fix CVE-2022-39282</changelog>
  <changelog author="liyuxiang &lt;liyuxiang@ncti-gba.cn&gt; - 2:2.8.1-2" date="1669118400">- Fix CVE-2022-39316
- Fix CVE-2022-39318
- Fix CVE-2022-39319
- Fix CVE-2022-39347
- Fix CVE-2022-41877</changelog>
  <changelog author="liyuxiang &lt;liyuxiang@ncti-gba.cn&gt; - 2:2.8.1-3" date="1669377600">- Fix CVE-2022-39320
- Fix CVE-2022-39317</changelog>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt;  - 2:2.8.1-4" date="1670932800">- add requires systemd-pam</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2:2.11.1-1" date="1694001600">- 2.11.1
- Fix CVE-2023-40567
- Fix CVE-2023-40569
- Fix CVE-2023-40188
- Fix CVE-2023-40186
- Fix CVE-2023-40181
- Fix CVE-2023-39353
- Fix CVE-2023-39352
- Fix CVE-2023-39356
- Fix CVE-2023-39350
- Fix CVE-2023-39351
- Fix CVE-2023-39354
- Fix CVE-2023-40589</changelog>
</package>
<package pkgid="f2422c0e9abfffb935b7ae8c152bd554c8ab10df76c0c3e53b1a847d4c300231" name="freerdp" arch="src">
  <version epoch="2" ver="2.11.1" rel="2.oe2203sp1"/>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 2:2.7.0-1" date="1651924800">- Upgrade to 2.7.0
- Fix CVE-2022-24882 CVE-2022-24883</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 2:2.8.1-1" date="1666267200">- Upgrade to 2.8.1
- Fix CVE-2022-39282</changelog>
  <changelog author="liyuxiang &lt;liyuxiang@ncti-gba.cn&gt; - 2:2.8.1-2" date="1669118400">- Fix CVE-2022-39316
- Fix CVE-2022-39318
- Fix CVE-2022-39319
- Fix CVE-2022-39347
- Fix CVE-2022-41877</changelog>
  <changelog author="liyuxiang &lt;liyuxiang@ncti-gba.cn&gt; - 2:2.8.1-3" date="1669377600">- Fix CVE-2022-39320
- Fix CVE-2022-39317</changelog>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt;  - 2:2.8.1-4" date="1670932800">- add requires systemd-pam</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2:2.11.1-1" date="1694001600">- 2.11.1
- Fix CVE-2023-40567
- Fix CVE-2023-40569
- Fix CVE-2023-40188
- Fix CVE-2023-40186
- Fix CVE-2023-40181
- Fix CVE-2023-39353
- Fix CVE-2023-39352
- Fix CVE-2023-39356
- Fix CVE-2023-39350
- Fix CVE-2023-39351
- Fix CVE-2023-39354
- Fix CVE-2023-40589</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2:2.11.1-2" date="1706097600">- Fix CVE-2024-22211</changelog>
</package>
<package pkgid="65b20d942e2b110583f7c9fb8c4c91de6ffe4bc843b1cc27c8993cc71443810b" name="freerdp" arch="src">
  <version epoch="2" ver="2.11.7" rel="1.oe2203sp1"/>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 2:2.7.0-1" date="1651924800">- Upgrade to 2.7.0
- Fix CVE-2022-24882 CVE-2022-24883</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 2:2.8.1-1" date="1666267200">- Upgrade to 2.8.1
- Fix CVE-2022-39282</changelog>
  <changelog author="liyuxiang &lt;liyuxiang@ncti-gba.cn&gt; - 2:2.8.1-2" date="1669118400">- Fix CVE-2022-39316
- Fix CVE-2022-39318
- Fix CVE-2022-39319
- Fix CVE-2022-39347
- Fix CVE-2022-41877</changelog>
  <changelog author="liyuxiang &lt;liyuxiang@ncti-gba.cn&gt; - 2:2.8.1-3" date="1669377600">- Fix CVE-2022-39320
- Fix CVE-2022-39317</changelog>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt;  - 2:2.8.1-4" date="1670932800">- add requires systemd-pam</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2:2.11.1-1" date="1694001600">- 2.11.1
- Fix CVE-2023-40567
- Fix CVE-2023-40569
- Fix CVE-2023-40188
- Fix CVE-2023-40186
- Fix CVE-2023-40181
- Fix CVE-2023-39353
- Fix CVE-2023-39352
- Fix CVE-2023-39356
- Fix CVE-2023-39350
- Fix CVE-2023-39351
- Fix CVE-2023-39354
- Fix CVE-2023-40589</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2:2.11.1-2" date="1706097600">- Fix CVE-2024-22211</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2:2.11.7-1" date="1713873600">- Update to 2.11.7 for fix CVE-2024-32039,CVE-2024-32040,
  CVE-2024-32041,CVE-2024-32458,CVE-2024-32459,CVE-2024-32460,
  CVE-2024-32658,CVE-2024-32659 and CVE-2024-32660</changelog>
</package>
<package pkgid="423463ad5cd7606fb34d70e90d542b14f854adca91879da9618e260936ae7a25" name="freerdp" arch="src">
  <version epoch="2" ver="2.11.7" rel="2.oe2203sp1"/>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 2:2.7.0-1" date="1651924800">- Upgrade to 2.7.0
- Fix CVE-2022-24882 CVE-2022-24883</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 2:2.8.1-1" date="1666267200">- Upgrade to 2.8.1
- Fix CVE-2022-39282</changelog>
  <changelog author="liyuxiang &lt;liyuxiang@ncti-gba.cn&gt; - 2:2.8.1-2" date="1669118400">- Fix CVE-2022-39316
- Fix CVE-2022-39318
- Fix CVE-2022-39319
- Fix CVE-2022-39347
- Fix CVE-2022-41877</changelog>
  <changelog author="liyuxiang &lt;liyuxiang@ncti-gba.cn&gt; - 2:2.8.1-3" date="1669377600">- Fix CVE-2022-39320
- Fix CVE-2022-39317</changelog>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt;  - 2:2.8.1-4" date="1670932800">- add requires systemd-pam</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2:2.11.1-1" date="1694001600">- 2.11.1
- Fix CVE-2023-40567
- Fix CVE-2023-40569
- Fix CVE-2023-40188
- Fix CVE-2023-40186
- Fix CVE-2023-40181
- Fix CVE-2023-39353
- Fix CVE-2023-39352
- Fix CVE-2023-39356
- Fix CVE-2023-39350
- Fix CVE-2023-39351
- Fix CVE-2023-39354
- Fix CVE-2023-40589</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2:2.11.1-2" date="1706097600">- Fix CVE-2024-22211</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2:2.11.7-1" date="1713873600">- Update to 2.11.7 for fix CVE-2024-32039,CVE-2024-32040,
  CVE-2024-32041,CVE-2024-32458,CVE-2024-32459,CVE-2024-32460,
  CVE-2024-32658,CVE-2024-32659 and CVE-2024-32660</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2:2.11.7-2" date="1714996800">- Fix CVE-2024-32661</changelog>
</package>
<package pkgid="a5f7764d2d1fc872a771ea816fbc60f4719fbc855925481afdc963e32a3ca240" name="freetype" arch="src">
  <version epoch="0" ver="2.12.1" rel="2.oe2203sp1"/>
  <changelog author="dongyuzhen &lt;dongyuzhen@huawei.com&gt; - 2.11.0-1" date="1639137600">- update to 2.11.0</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-paerners.com&gt; - 2.11.0-2" date="1652529600">- fix CVE-2022-27404,CVE-2022-27405,CVE-2022-27406</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 2.12.1-1" date="1669723200">- update to 2.12.1</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 2.12.1-2" date="1681732800">- fix CVE-2023-2004</changelog>
</package>
<package pkgid="10d4d7a864c09d3de7d9c47a35116ecf7d61f6e34af73297f964c18972590632" name="future" arch="src">
  <version epoch="0" ver="0.18.2" rel="2.oe2203sp1"/>
  <changelog author="liksh &lt;liks11@chinaunicom.cn&gt; - 0.18.2-1" date="1626264000">- update package from 0.16.0 to 0.18.2</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 0.18.2-2" date="1678449600">- Fix CVE-2022-40899</changelog>
</package>
<package pkgid="07e5542c0092aa841c1f190930b1eb070b6c4bbd9c3ce1d74664fdc0df18f57b" name="galera" arch="src">
  <version epoch="0" ver="26.4.16" rel="1.oe2203sp1"/>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 26.4.16-1" date="1701777600">- Upgrade to 26.4.16 and fix build error</changelog>
</package>
<package pkgid="5dfc32e5d924c414056a1d55aa9eb66406776b389d821e22ec779f5b19dfeef8" name="gawk" arch="src">
  <version epoch="0" ver="5.1.1" rel="5.oe2203sp1"/>
  <changelog author="wangjie &lt;wangjie375@huawei.com&gt; - 5.1.1-1" date="1639224000">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:Update gawk to  5.1.1-1</changelog>
  <changelog author="zoulin &lt;zoulin13@h-partners.com&gt; - 5.1.1-2" date="1648814400">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:fix test case probabilistic fail</changelog>
  <changelog author="zoulin &lt;zoulin13@h-partners.com&gt; - 5.1.1-3" date="1662120000">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:fix source code cannot be found</changelog>
  <changelog author="guoqinglan &lt;guoqinglan@kylinos.com.cn&gt; - 5.1.1-4" date="1682251200">- fix sw_64 build</changelog>
  <changelog author="yangmingtai &lt;yangmingtai@huawei.com&gt; - 5.1.1-5" date="1693224000">- fix CVE-2023-4156</changelog>
</package>
<package pkgid="af41963d29686d303a5b8a879abbdda1c1598d1bfca11dad743941ea21c35da5" name="gazelle" arch="src">
  <version epoch="0" ver="1.0.1" rel="44.oe2203sp1"/>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 1.0.1-35" date="1671278400">- optimite net type
  app bind numa when epoll/poll create
  stack thread params set dafult value</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 1.0.1-36" date="1671278401">- remove mbuf reserve in mbuf alloc</changelog>
  <changelog author="wuchangsheng &lt;wuchangsheng2@huawei.com&gt; - 1.0.1-37" date="1671364800">- pkts-bulk-send-to-nic and rpc-dont-send</changelog>
  <changelog author="wuchangsheng &lt;wuchangsheng2@huawei.com&gt; - 1.0.1-38" date="1671537600">- optimite recv data buff and send pkts index</changelog>
  <changelog author="wuchangsheng &lt;wuchangsheng2@huawei.com&gt; - 1.0.1-39" date="1671624000">- add mempool dfx info
  write support without epoll/poll</changelog>
  <changelog author="wuchangsheng &lt;wuchangsheng2@huawei.com&gt; - 1.0.1-40" date="1671710400">- add dfx rcv_nxt info
  mbuf private cache line align
  send pkts index bug fix
  free recv pkts in main loop</changelog>
  <changelog author="kircher &lt;majun65@huawei.com&gt; - 1.0.1-41" date="1671796800">- fix null pointer deref in stack_broadcast_close
- fix lstack Makefile warning</changelog>
  <changelog author="wuchangsheng &lt;wuchangsheng2@huawei.com&gt; - 1.0.1-42" date="1672228800">- pbuf cacheline align
  support main thread affinity
  reduce epoll wakeup</changelog>
  <changelog author="wuchangsheng &lt;wuchangsheng2@huawei.com&gt; - 1.0.1-43" date="1672401600">- revert expand recv data buff</changelog>
  <changelog author="kircher &lt;majun65@huawei.com&gt; - 1.0.1-44" date="1673006400">- add the suggestion of using the -u parameter when the connection to unix socket fails</changelog>
</package>
<package pkgid="098506009d7a07afa9efbd97ac54d6cf1ab8ad6bfe523094bc3ea073f4a532c7" name="gazelle" arch="src">
  <version epoch="0" ver="1.0.1" rel="57.oe2203sp1"/>
  <changelog author="sunsuwan &lt;sunsuwan3@huawei.com&gt; - 1.0.1-55" date="1681992000">- sepeate_string_to array add error args handle</changelog>
  <changelog author="jiangheng12 &lt;jiangheng14@huawei.com&gt; - 1.0.1-56" date="1683979200">- fix build err with dpdk-21.11
- fix config flow rule race
- update lstack.Makefile
- add socket check before write it
- optimize do_close
- set kni_switch valid only in primary process
- fix build err on select_path
- optimite select_path and pbuf_take
- check primary process idx and secondary lstack num
- revert select_thread_path and optimize app thread when sendmsg
- do not transfer broadcast arp pkts to other process</changelog>
  <changelog author="kircher &lt;majun65@huawei.com&gt; - 1.0.1-57" date="1684238400">- add udp multicast support in gazelle
- clean code
- add bond4 suport
- dfx: security function failed, return error directly
- dfx: set g_unix_fd to -1 after abnormal close fd to avoid double close
- fix bond_ports parse error fix socket_mem parse error when the value exceeds 65536 exit if create_rxtx_pktmbuf failed build.sh build failed return 1 clean code
- add parentheses to fix build error
- fix rpc msg alloc failed fix process_numa args error coredump fix sock-&gt;conn not free when fd is kernel mode
- kni down not stop nic
- fix client connect number unbalance on lstack
- fix gazellectl -x error when multiplt user nic config</changelog>
</package>
<package pkgid="c8723fdd5c0dec28f96d669df8d2c6cbd3b83d478fd764a20638d671044b467b" name="gazelle" arch="src">
  <version epoch="0" ver="1.0.1" rel="70.oe2203sp1"/>
  <changelog author="jiangheng12 &lt;jiangheng14@huawei.com&gt; - 1.0.1-68" date="1687348800">- check return value of hugepage_init to avoid coredump when hugepage memory is insufficient
- fix core dump when slave mac failed</changelog>
  <changelog author="jiangheng12 &lt;jiangheng14@huawei.com&gt; - 1.0.1-69" date="1687867200">- add udp_enable to turn off udp in need</changelog>
  <changelog author="jiangheng12 &lt;jiangheng14@huawei.com&gt; - 1.0.1-70" date="1688126400">- add build requires constraints on lwip version</changelog>
</package>
<package pkgid="b64033d32d9698ed8450bfe74615ecd1d9704e90e27b0a007d7655edb58bf47d" name="gazelle" arch="src">
  <version epoch="0" ver="1.0.2" rel="2.oe2203sp1"/>
  <changelog author="jiangheng12 &lt;jiangheng14@huawei.com&gt; - 1.0.1-68" date="1687348800">- check return value of hugepage_init to avoid coredump when hugepage memory is insufficient
- fix core dump when slave mac failed</changelog>
  <changelog author="jiangheng12 &lt;jiangheng14@huawei.com&gt; - 1.0.1-69" date="1687867200">- add udp_enable to turn off udp in need</changelog>
  <changelog author="jiangheng12 &lt;jiangheng14@huawei.com&gt; - 1.0.1-70" date="1688126400">- add build requires constraints on lwip version</changelog>
  <changelog author="jiangheng12 &lt;chengyechun1@huawei.com&gt; - 1.0.1-71" date="1688212800">- fix bond4 EPOLLOUT event error</changelog>
  <changelog author="jiangheng12 &lt;chengyechun1@huawei.com&gt; - 1.0.1-72" date="1688385600">- bond4 add dpdk return value check</changelog>
  <changelog author="jiangheng12 &lt;chengyechun1@huawei.com&gt; - 1.0.2-1" date="1688472000">- update version to 1.0.2</changelog>
  <changelog author="jiangheng12 &lt;jiangheng14@huawei.com&gt; - 1.0.2-2" date="1688817600">- sync remove unused dpdk dynamic libraries</changelog>
</package>
<package pkgid="acf8c89a144649257ab8f4d301cdf12b118c2f854e4294e41e5cf22343637f77" name="gazelle" arch="src">
  <version epoch="0" ver="1.0.2" rel="23.oe2203sp1"/>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-14" date="1700308800">- enable ipv6</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-15" date="1700308801">- wrap: dont hijack select temporarily</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-16" date="1700654400">- ipv6</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-17" date="1701259200">- support vlan offload
- add vlan_id in netif
- dfx: add tcp exception and kernel event statistics
- stack: fix coredump caused by gazelleclt in rtc mode when stack num defined is greater than the hijacked thread num
- add tcp faste timer cnt
- dfx: support bond get dpdk xstats
- update src/ltran/ltran_param.c. 规范679行的报错日志信息，将“,”之后的“Please”修正为“please”
- ltran support vlan
- cfg: rm ipv6_enable
- wrap: fix connect wrong port after addr bind two ports
- add gazelle log
- PRE_LOG: modify log info while there are repeated items in conf file
- add gazelle log</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-18" date="1702123200">- Fixed an issue where no packet is sent or received when UDP traffic is sent
- support show nic offload and features
- log: optimize lstack log
- gazellectl add connect para
- dfx: fix 'gazellectl lstack show ip' failed
- The call stack is not printed in the proactive exit scenario.
- dfx: gazellectl -c support ipv6
- 1.solve the problem of 1w connection not being able to ping 2.add debug info : rpc_mempool availd size
- wrap: support shutdown
- add struct gz_addr_t
- fix coredump because of addr null in lwip_fill_sendring
- fix compilation error
- fix coredump because sock closed before send data fully
- gazellectl: fix gazellectl lstack show 1 -r error</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-19" date="1702728000">- fix EPOLLIN event error
- optimize gazelle exit process 1. close all fds 2. lstack thread exits, then gazelle process exits
- mod unix time stamp to local time
- fix close can't exit
- add keep-alive info
- dfx: fix kernel_events stat</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-20" date="1702900800">- fix gazellectl lstack show ip -r with ltran error &amp;&amp; log info display unknow error
- mod time err</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-21" date="1702987200">- support netperf
- fix udp multicast bind error</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-22" date="1703678400">- fix rte_ring_create/free time consuming
- use default nonblock mode
- fix func separate_str_to_array overflow problem
- CFG:fix check func strdup return value is NULL
- fix gazellectl -c msg error
- sigaction: fix deprecated signal flags
- fix alloc not free
- optimize shutdown exit process</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-23" date="1706356800">- fix dpdk_alloc_pktmbuf time-consuming
- ltran: optimize config file error message</changelog>
</package>
<package pkgid="c235ceb79578659e59af8c6fdaf1b86df61a2a458d2ec8ad2ad465336cd404c9" name="gazelle" arch="src">
  <version epoch="0" ver="1.0.2" rel="46.oe2203sp1"/>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 1.0.2-43" date="1718366400">- refacotr udp send</changelog>
  <changelog author="yinbin&lt;yinbin6@huawei.com&gt; - 1.0.2-44" date="1719316800">- sync solve compile err in 20.03</changelog>
  <changelog author="yinbin&lt;yinbin6@huawei.com&gt; - 1.0.2-45" date="1719316801">- fix changelog version incorrect</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-46" date="1719403200">- fix function call error</changelog>
</package>
<package pkgid="b991cc91c303f604717fccd910195cc762b0a0c3076411217eb36fd7f5350fed" name="gazelle" arch="src">
  <version epoch="0" ver="1.0.2" rel="48.oe2203sp1"/>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 1.0.2-43" date="1718366400">- refacotr udp send</changelog>
  <changelog author="yinbin&lt;yinbin6@huawei.com&gt; - 1.0.2-44" date="1719316800">- sync solve compile err in 20.03</changelog>
  <changelog author="yinbin&lt;yinbin6@huawei.com&gt; - 1.0.2-45" date="1719316801">- fix changelog version incorrect</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-46" date="1719403200">- fix function call error</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-47" date="1719576000">- fix coredump when get empty from udp sendring
- [virtio]: distribute pkg by dst_port
- parse packages type in rx_poll
- [virtio]: cfg ipv4 and ipv6 addr
- fix build failed in 2003sp4
- fix dpdk_bond_primary_set bug
- cfg: del unnecessary logs
- perftool: add latency tool</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-48" date="1720180800">- add flow_bifurcation switch in lstack_cfg file
- virtio: dfx data of virtio
- virtio: update g_rule_port by reg_ring_type enum
- virtio: mode actual_queue_num
- fix poll init not clear old fd</changelog>
</package>
<package pkgid="966d53b7119a99da236a2e66d197380d0ac7f5756cf5d1087388028f849de1e1" name="gazelle" arch="src">
  <version epoch="0" ver="1.0.2" rel="59.oe2203sp1"/>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-50" date="1720699200">- cleancode: rename gazelle files in lwip
- add .gitignore
- cleancode: improving makefile readability</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-51" date="1721390400">- cleancode: refactor sys_now and lwip_ioctl
- add sem post when update event
- cleancode: refactor lwipgz_hlist.h
- fix EPOLLIN event dropd
- cleancode: refactor lwipgz_list.h
- cleancode: refactor posix_api
- fix some error of NULL pointer
- cleancode: refactor posix type and get_socket
- cleancode: refactor lwipsock.h</changelog>
  <changelog author="yangchen555 &lt;yangchen145@huawei.com&gt; - 1.0.2-52" date="1721908800">- fix redis coredump when hugetlbs pagesize is 1024M
- vitio_user: modify mbuf index for bond4
- Check the return of lwip_init
- support kernel connect
- POSIX: fix select timeout disable and build failed in openEuler 2003</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-53" date="1722600000">- virtio_user: modify mbuf index for bond4
- fix issue: create virtio_user based on bond4 main network card
- virtio: fix dfx error with multiple cpus
- dfx: optimize gazellectl -x for bond</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-54" date="1723204800">- refector fill udp sendring
- virtio_user: solve the issue that failed to bind virtio_user's IPv6 address
- virtio_user: add vlan info for kernerl packets when vlan switch is on
- WRAP:fix double connect lead posix api disable</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-55" date="1723809600">- virtio: mod virtio_user_name when multi process is on
- WRAP: fix bind log error
- WRAP:fix ltran mode did not bind kernel while open kni
- virtio_user: The program establishes a network connection when network card status is up
- fix redis coredump ctrl-c during the pressure test</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-56" date="1724414400">- virtio: solve compilation error in 2003sp3
- virtio_user: check netif status</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-57" date="1724673600">- CMAKE: fix ltran build error in 2403</changelog>
  <changelog author="laokz &lt;zhangkai@iscas.ac.cn&gt; - 1.0.2-58" date="1724846400">- add riscv64 to %ExclusiveArch</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-59" date="1725019200">- epoll: fix wild pointer detected by cooddy
- tools: fix sync patch script date wrong and update the way get patchnum
- cfg: modify maximum tcp_conn_count to 2w
- fix mbuf_total calculation error</changelog>
</package>
<package pkgid="a8ee1d13e954120080a175a788d87cd55e284b25147b21961aebea09793a6d4d" name="gcc" arch="src">
  <version epoch="0" ver="10.3.1" rel="20.oe2203sp1"/>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-11" date="1651838400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="zhaomengmeng &lt;zhaomengmeng@kylinos.cn&gt; - 10.3.1-12" date="1657281600">- Type:SPEC
- ID:NA
- SUG:NA
- DESC:Enable libgccjit</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-13" date="1659960000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
</package>
<package pkgid="28395428a6641ef2c25b5b4f0a01a6f011dc21ee998fd0cf62bff3c7c57bfb49" name="gcc" arch="src">
  <version epoch="0" ver="10.3.1" rel="22.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-13" date="1659960000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
</package>
<package pkgid="466559b77b2af00292d0c482baaae285ee026c7180e6074ea7366bd7b52593bd" name="gcc" arch="src">
  <version epoch="0" ver="10.3.1" rel="23.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
</package>
<package pkgid="3decc1d668483f9e82be4432bdd6343484258c4f47488c5873df7209a85fe2be" name="gcc" arch="src">
  <version epoch="0" ver="10.3.1" rel="24.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
</package>
<package pkgid="a00d14bd66547603ae333faca96850048dc81d192443ccd781e4c03650176a61" name="gcc" arch="src">
  <version epoch="0" ver="10.3.1" rel="25.oe2203sp1"/>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
  <changelog author="Zhao Zhenyu &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-25" date="1695384000">- Type:CVE
- ID:NA
- SUG:NA
- DESC: To fix CVE-2023-4039</changelog>
</package>
<package pkgid="e81216c5055e3229bfdbdd1c84f34375694531b0db6c6958fc57b92f896f23a4" name="gcc" arch="src">
  <version epoch="0" ver="10.3.1" rel="28.oe2203sp1"/>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
  <changelog author="Zhao Zhenyu &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-25" date="1695384000">- Type:CVE
- ID:NA
- SUG:NA
- DESC: To fix CVE-2023-4039</changelog>
  <changelog author="jiangchangang &lt;jiangchuangang@huawei.com&gt; - 10.3.1-26" date="1700136000">- Type:CVE
- ID:NA
- SUG:NA
- DESC:fix glibc test coredump</changelog>
  <changelog author="Zheng Chenhui &lt;zhengchenhui1@huawei.com&gt; - 10.3.1-27" date="1706788800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 10.3.1-28" date="1713182400">- Type:SPEC
- ID:NA
- SUG:NA
- DESC:disable isl</changelog>
</package>
<package pkgid="0fe3b88c5721465b022d6034184df0a819e3060e26cbfad17ca9a2569c3f0d25" name="gdb" arch="src">
  <version epoch="0" ver="11.1" rel="6.oe2203sp1"/>
  <changelog author="- Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 9.2-8" date="1640088000">- fix gdb build error via cherry-pick upstream patch</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@huawei.com&gt; - 11.1-1" date="1640606400">- upgrade GDB version to 11.1</changelog>
  <changelog author="yaowenbin &lt;yaowenbin1@huawei.com&gt; - 11.1-2" date="1666699200">- upgrade GDB release to 2</changelog>
  <changelog author="Wenyu Liu &lt;liuwenyu7@huawei.com&gt; - 11.1-3" date="1669204800">- Eliminate hard coding issues for vendor name in gdb/version.in</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@kylinsec.com.cn&gt; - 11.1-4" date="1682251200">- Sync 2203 loongarch64 support patch file</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 11.1-5" date="1693656000">- fix CVE-2023-39128</changelog>
  <changelog author="Liu Chao &lt;liuchao173@huawei.com&gt; - 11.1-6" date="1693828800">- correct patch's commit message</changelog>
</package>
<package pkgid="5946a5e50470e8f486ca39dc083d2243f8ccf5fadfe07f0a4ef2204ff0ce35a6" name="gdb" arch="src">
  <version epoch="0" ver="11.1" rel="7.oe2203sp1"/>
  <changelog author="- Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 9.2-8" date="1640088000">- fix gdb build error via cherry-pick upstream patch</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@huawei.com&gt; - 11.1-1" date="1640606400">- upgrade GDB version to 11.1</changelog>
  <changelog author="yaowenbin &lt;yaowenbin1@huawei.com&gt; - 11.1-2" date="1666699200">- upgrade GDB release to 2</changelog>
  <changelog author="Wenyu Liu &lt;liuwenyu7@huawei.com&gt; - 11.1-3" date="1669204800">- Eliminate hard coding issues for vendor name in gdb/version.in</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@kylinsec.com.cn&gt; - 11.1-4" date="1682251200">- Sync 2203 loongarch64 support patch file</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 11.1-5" date="1693656000">- fix CVE-2023-39128</changelog>
  <changelog author="Liu Chao &lt;liuchao173@huawei.com&gt; - 11.1-6" date="1693828800">- correct patch's commit message</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 11.1-7" date="1697112000">- fix CVE-2023-39129</changelog>
</package>
<package pkgid="3c0249d1317a9096265160594e739880d88b0836c3505beee6ad0b851e334520" name="gdb" arch="src">
  <version epoch="0" ver="11.1" rel="8.oe2203sp1"/>
  <changelog author="- Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 9.2-8" date="1640088000">- fix gdb build error via cherry-pick upstream patch</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@huawei.com&gt; - 11.1-1" date="1640606400">- upgrade GDB version to 11.1</changelog>
  <changelog author="yaowenbin &lt;yaowenbin1@huawei.com&gt; - 11.1-2" date="1666699200">- upgrade GDB release to 2</changelog>
  <changelog author="Wenyu Liu &lt;liuwenyu7@huawei.com&gt; - 11.1-3" date="1669204800">- Eliminate hard coding issues for vendor name in gdb/version.in</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@kylinsec.com.cn&gt; - 11.1-4" date="1682251200">- Sync 2203 loongarch64 support patch file</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 11.1-5" date="1693656000">- fix CVE-2023-39128</changelog>
  <changelog author="Liu Chao &lt;liuchao173@huawei.com&gt; - 11.1-6" date="1693828800">- correct patch's commit message</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 11.1-7" date="1697112000">- fix CVE-2023-39129</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 11.1-8" date="1700654400">- fix CVE-2023-39130</changelog>
</package>
<package pkgid="a95787902c6344575c1077101f6c5cedea149a1b7765110e3752adc772fffe8c" name="gdbm" arch="src">
  <version epoch="1" ver="1.22" rel="11.oe2203sp1"/>
  <changelog author="yangchenguang &lt;yangchenguang@uniontech.com&gt; - 1.22-2" date="1639051200">- Fix gdbmtool parm import error</changelog>
  <changelog author="yanglongkang &lt;yanglongkang@h-partners.com&gt; - 1.22-3" date="1646136000">- add info into the devel package to resolve the installation error</changelog>
  <changelog author="wangzhiqiang &lt;wangzhiqiang95@huawei.com&gt; - 1:1.22-4" date="1655467200">- DESC: Fix binary dump format for key and or data of zero size</changelog>
  <changelog author="wangzhqiang &lt;wangzhiqiang95@huawei.com&gt; - 1:1.22-5" date="1655899200">- DESC: gdbm_dump-fix-command-line-error-detection</changelog>
  <changelog author="wangzhqiang &lt;wangzhiqiang95@huawei.com&gt; - 1:1.22-6" date="1655985600">- DESC: fix location tracking in gdbmtool, fix the recover command</changelog>
  <changelog author="wangzhqiang &lt;wangzhiqiang95@huawei.com&gt; - 1:1.22-7" date="1656417600">- DESC: Fix coredump in gdbmtool history command</changelog>
  <changelog author="wangzhqiang &lt;wangzhiqiang95@huawei.com&gt; - 1:1.22-8" date="1656936000">- DESC: Fix semantics of gdbm_load -r</changelog>
  <changelog author="wangzhqiang &lt;wangzhiqiang95@huawei.com&gt; - 1:1.22-9" date="1657022400">- DESC: Improve handling of -u in gdbm_load</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@uniontech.com&gt; - 1:1.22-10" date="1661860800">- DESC: Fix allocated memory not released</changelog>
  <changelog author="wangzhiqiang &lt;wangzhiqiang95@huawei.com&gt; - 1:1.22-11" date="1679054400">- DESC: Minor fix in the compatibility library</changelog>
</package>
<package pkgid="5e36bf7b9dfa7e8e83c27f80d0e9791b10539c1cbaaca3e01a3caaee7b823282" name="gdk-pixbuf2" arch="src">
  <version epoch="0" ver="2.42.6" rel="6.oe2203sp1"/>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 2.40.0-2" date="1626782400">- delete gdb in buildrequires</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 2.42.6-1" date="1638446400">- update to 2.42.6</changelog>
  <changelog author="liuyumeng &lt;liuyumeng5@h-partners.com&gt; - 2.42.6-2" date="1648641600">- enable tests</changelog>
  <changelog author="loong_C &lt;loong_c@yeah.net&gt; - 2.42.6-3" date="1652875200">- fix spec changelog date</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 2.42.6-4" date="1661428800">- fix CVE-2021-46829</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 2.42.6-5" date="1669896000">- disable make check</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.42.6-6" date="1687262400">- fix CVE-2021-44648</changelog>
</package>
<package pkgid="afcc95aaf3cb47231e40266b2717e8d507e4cd6750651d57188ae432c4a5cc0b" name="gdk-pixbuf2" arch="src">
  <version epoch="0" ver="2.42.6" rel="7.oe2203sp1"/>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 2.42.6-4" date="1661428800">- fix CVE-2021-46829</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 2.42.6-5" date="1669896000">- disable make check</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.42.6-6" date="1687262400">- fix CVE-2021-44648</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.42.6-7" date="1719403200">- Fix CVE-2022-48622</changelog>
</package>
<package pkgid="1297d842daf4027d0a6d81c6b4e011795e7b705fc7077602a40e71b2d13dabf5" name="ghostscript" arch="src">
  <version epoch="0" ver="9.55.0" rel="10.oe2203sp1"/>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-3" date="1692100800">- fix CVE-2023-38559</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-4" date="1692878400">- fix CVE-2023-28879</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-5" date="1694001600">- fix CVE-2023-36664</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-6" date="1703505600">- fix CVE-2023-46751</changelog>
  <changelog author="xuchenchen &lt;xuchenchen@kylinos.cn&gt; - 9.55.0-7" date="1714996800">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2023-52722</changelog>
  <changelog author="xuchenchen &lt;xuchenchen@kylinos.cn&gt; - 9.55.0-8" date="1716724800">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2024-29510 CVE-2024-33869 CVE-2024-33870</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 9.55.0-9" date="1720094400">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2024-29506 CVE-2024-29507 CVE-2024-29508 CVE-2024-29509 CVE-2024-29511</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 9.55.0-10" date="1720785600">- Type:CVE
- ID:NA
- SUG:NA
- DECS: This is the second part of the fix for CVE-2024-29511</changelog>
</package>
<package pkgid="358b3f744bd6af5267d47ce487463ba31a2e4bc64d117de6467014523c77a6a8" name="ghostscript" arch="src">
  <version epoch="0" ver="9.55.0" rel="5.oe2203sp1"/>
  <changelog author="yangzhuangzhuang &lt;yangzhuangzhuang1@huawei.com&gt; - 9.55.0-1" date="1639224000">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:update version to 9.55.0</changelog>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 9.55.0-2" date="1657022400">- fix CVE-2022-2085</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-3" date="1692100800">- fix CVE-2023-38559</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-4" date="1692878400">- fix CVE-2023-28879</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-5" date="1694001600">- fix CVE-2023-36664</changelog>
</package>
<package pkgid="e9fc23888b98d2e58944807a3046ab7ab522705cda81b99004a195b89adc7e0a" name="ghostscript" arch="src">
  <version epoch="0" ver="9.55.0" rel="6.oe2203sp1"/>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 9.55.0-2" date="1657022400">- fix CVE-2022-2085</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-3" date="1692100800">- fix CVE-2023-38559</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-4" date="1692878400">- fix CVE-2023-28879</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-5" date="1694001600">- fix CVE-2023-36664</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-6" date="1703505600">- fix CVE-2023-46751</changelog>
</package>
<package pkgid="ceeae13df69ad9806fecd5c1e34dde87c4398b155a829bce1241db8954b5265f" name="giflib" arch="src">
  <version epoch="0" ver="5.2.1" rel="7.oe2203sp1"/>
  <changelog author="duyiwei &lt;duyiwei@kylinos.cn&gt; - 5.2.1-5" date="1655294400">- fix CVE-2022-28506</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; -5.2.1-6" date="1661428800">- Fix rpmbuild error</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 5.2.1-7" date="1694779200">- Fix CVE-2023-39742</changelog>
</package>
<package pkgid="cd1a6bd7196b13cf279f8135444c2b7a24ca8b4fd3c40b5d83d55174305c2309" name="giflib" arch="src">
  <version epoch="0" ver="5.2.1" rel="8.oe2203sp1"/>
  <changelog author="duyiwei &lt;duyiwei@kylinos.cn&gt; - 5.2.1-5" date="1655294400">- fix CVE-2022-28506</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; -5.2.1-6" date="1661428800">- Fix rpmbuild error</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 5.2.1-7" date="1694779200">- Fix CVE-2023-39742</changelog>
  <changelog author="liwenjie &lt;liwenjie@kylinos.cn&gt; - 5.2.1-8" date="1715688000">- Fix CVE-2021-40633</changelog>
</package>
<package pkgid="3685d56c33f7d61fa229d2d07a1aacb655913c2c26631baad4ed1815ebb1c64e" name="giflib" arch="src">
  <version epoch="0" ver="5.2.2" rel="1.oe2203sp1"/>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; -5.2.1-6" date="1661428800">- Fix rpmbuild error</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 5.2.1-7" date="1694779200">- Fix CVE-2023-39742</changelog>
  <changelog author="liwenjie &lt;liwenjie@kylinos.cn&gt; - 5.2.1-8" date="1715688000">- Fix CVE-2021-40633</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 5.2.2-1" date="1718971200">- Update to 5.2.2
  * Fixes for CVE-2023-48161 (bsc#1217390), CVE-2022-28506 (bsc#1198880)
  * Address SF issue #151: A heap-buffer-overflow in gif2rgb.c:294:45
  * Address SF issue #166: a read zero page leads segment fault in
    getarg.c and memory leaks in gif2rgb.c and gifmalloc.c</changelog>
</package>
<package pkgid="c17456d1bbe7f10fc509a78cfe498fd12987707b270f7acc54f3ca9af699f4d2" name="git" arch="src">
  <version epoch="0" ver="2.33.0" rel="11.oe2203sp1"/>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-2" date="1653048000">- Type:CVE
- ID:CVE-2022-24765
- SUG:NA
- DESC:Fix CVE-2022-24765</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-3" date="1658145600">- Type:CVE
- ID:CVE-2022-29187
- SUG:NA
- DESC:Fix CVE-2022-29187</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-4" date="1663588800">- add subpackage git-core</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-5" date="1666353600">- Type:CVE
- ID:CVE-2022-39253 CVE-2022-39260
- SUG:NA
- DESC:Fix CVE-2022-39253 CVE-2022-39260</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-6" date="1674129600">- Type:CVE
- ID:CVE-2022-23521 CVE-2022-41903
- SUG:NA
- DESC:Fix CVE-2022-23521 CVE-2022-41903</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-7" date="1674907200">- Type:CVE
- ID:CVE-2022-41953
- SUG:NA
- DESC:Fix CVE-2022-41953</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-8" date="1675166400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Modify parameter in backport-CVE-2022-23521-attr-fix-silently-splitting-up-lines-longer-than-204.patch</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-9" date="1676462400">- Type:CVE
- ID:CVE-2023-22490 CVE-2023-23946
- SUG:NA
- DESC:Fix CVE-2023-22490 CVE-2023-23946</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-10" date="1682510400">- Type:CVE
- ID:CVE-2023-25652 CVE-2023-29007 CVE-2023-25815
- SUG:NA
- DESC:Fix CVE-2023-25652 CVE-2023-29007 CVE-2023-25815</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-11" date="1682596800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:enable multithreading compilation and installation,
       move Git.3pm.gz to perl-Git,avoid installation conflicts,
       change BuildRequires from pcre-devel to pcre2-devel.</changelog>
</package>
<package pkgid="f1239192c969c328af786732dc99049ff89a02c912c7f8a0fc7bc167541ce06b" name="git" arch="src">
  <version epoch="0" ver="2.33.0" rel="15.oe2203sp1"/>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-6" date="1674129600">- Type:CVE
- ID:CVE-2022-23521 CVE-2022-41903
- SUG:NA
- DESC:Fix CVE-2022-23521 CVE-2022-41903</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-7" date="1674907200">- Type:CVE
- ID:CVE-2022-41953
- SUG:NA
- DESC:Fix CVE-2022-41953</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-8" date="1675166400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Modify parameter in backport-CVE-2022-23521-attr-fix-silently-splitting-up-lines-longer-than-204.patch</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-9" date="1676462400">- Type:CVE
- ID:CVE-2023-22490 CVE-2023-23946
- SUG:NA
- DESC:Fix CVE-2023-22490 CVE-2023-23946</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-10" date="1682510400">- Type:CVE
- ID:CVE-2023-25652 CVE-2023-29007 CVE-2023-25815
- SUG:NA
- DESC:Fix CVE-2023-25652 CVE-2023-29007 CVE-2023-25815</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-11" date="1682596800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:enable multithreading compilation and installation,
       move Git.3pm.gz to perl-Git,avoid installation conflicts,
       change BuildRequires from pcre-devel to pcre2-devel.</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-12" date="1684324800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Fix duplicate files in git primary package and subpackage</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 2.33.0-13" date="1688731200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Specifying Obsoletes and Provides version numbers, prevent upgrade conflicts.
       Delete git-core-doc from git, git-core-doc is provided by git-help.</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-14" date="1715860800">- Type:CVE
- ID:CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465
- SUG:NA
- DESC:Fix CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-15" date="1716206400">- Type:CVE
- ID:CVE-2024-32002
- SUG:NA
- DESC:Fix CVE-2024-32002</changelog>
</package>
<package pkgid="8fb9200cd8aeac55990bcc9b601c54200d95c3c1ac0b3c7420dc4c6c58a67860" name="git" arch="src">
  <version epoch="0" ver="2.33.0" rel="7.oe2203sp1"/>
  <changelog author="panxiaohe &lt;panxiaohe@huawei.com&gt; - 2.30.0-4" date="1622203200">- Fix CVE-2021-29468
- Add gcc and gettext to BuildRequires
  - necessary for building and msgfmt command</changelog>
  <changelog author="panxiaohe&lt;panxiaohe@huawei.com&gt; - 2.30.0-5" date="1626782400">- remove unnecessary BuildRequires: gdb</changelog>
  <changelog author="fuanan &lt;fuanan3@huawei.com&gt; - 2.30.0-6" date="1631275200">- Type:CVE
- ID:CVE-2021-40330
- SUG:NA
- DESC:Fix CVE-2021-40330</changelog>
  <changelog author="zoulin&lt;zoulin13@huawei.com&gt; - 2.33.0-1" date="1638446400">- update version to 2.33.0</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-2" date="1653048000">- Type:CVE
- ID:CVE-2022-24765
- SUG:NA
- DESC:Fix CVE-2022-24765</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-3" date="1658145600">- Type:CVE
- ID:CVE-2022-29187
- SUG:NA
- DESC:Fix CVE-2022-29187</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-4" date="1663588800">- add subpackage git-core</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-5" date="1666353600">- Type:CVE
- ID:CVE-2022-39253 CVE-2022-39260
- SUG:NA
- DESC:Fix CVE-2022-39253 CVE-2022-39260</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-6" date="1674129600">- Type:CVE
- ID:CVE-2022-23521 CVE-2022-41903
- SUG:NA
- DESC:Fix CVE-2022-23521 CVE-2022-41903</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-7" date="1674907200">- Type:CVE
- ID:CVE-2022-41953
- SUG:NA
- DESC:Fix CVE-2022-41953</changelog>
</package>
<package pkgid="a64dc3d6f01d67f529de373e658742000cb6e3a853d7f05389c66873c21974a7" name="git" arch="src">
  <version epoch="0" ver="2.33.0" rel="9.oe2203sp1"/>
  <changelog author="fuanan &lt;fuanan3@huawei.com&gt; - 2.30.0-6" date="1631275200">- Type:CVE
- ID:CVE-2021-40330
- SUG:NA
- DESC:Fix CVE-2021-40330</changelog>
  <changelog author="zoulin&lt;zoulin13@huawei.com&gt; - 2.33.0-1" date="1638446400">- update version to 2.33.0</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-2" date="1653048000">- Type:CVE
- ID:CVE-2022-24765
- SUG:NA
- DESC:Fix CVE-2022-24765</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-3" date="1658145600">- Type:CVE
- ID:CVE-2022-29187
- SUG:NA
- DESC:Fix CVE-2022-29187</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-4" date="1663588800">- add subpackage git-core</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-5" date="1666353600">- Type:CVE
- ID:CVE-2022-39253 CVE-2022-39260
- SUG:NA
- DESC:Fix CVE-2022-39253 CVE-2022-39260</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-6" date="1674129600">- Type:CVE
- ID:CVE-2022-23521 CVE-2022-41903
- SUG:NA
- DESC:Fix CVE-2022-23521 CVE-2022-41903</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-7" date="1674907200">- Type:CVE
- ID:CVE-2022-41953
- SUG:NA
- DESC:Fix CVE-2022-41953</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-8" date="1675166400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Modify parameter in backport-CVE-2022-23521-attr-fix-silently-splitting-up-lines-longer-than-204.patch</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-9" date="1676462400">- Type:CVE
- ID:CVE-2023-22490 CVE-2023-23946
- SUG:NA
- DESC:Fix CVE-2023-22490 CVE-2023-23946</changelog>
</package>
<package pkgid="027c984d9748caab1489e95399d2b56aa01e2beff3cae0c7f27163f4040d411a" name="gjs" arch="src">
  <version epoch="0" ver="1.71.1" rel="2.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 1.71.1-1" date="1649246400">- Update to 1.71.1</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 1.71.1-2" date="1708344000">- rebuild for glib2 without sysprof</changelog>
</package>
<package pkgid="b0200273fba93a9ec88b4a3cd52e7f2f384bd469ac83b5626fa8a170edd9413e" name="glade" arch="src">
  <version epoch="0" ver="3.36.0" rel="3.oe2203sp1"/>
  <changelog author="zhanzhimin &lt;zhanzhimin@h-partners.com&gt; - 3.36.0-2" date="1647259200">- delete old so file</changelog>
  <changelog author="liweigang &lt;izmirvii@gmail.com&gt; - 3.36.0-3" date="1708344000">- fix CVE-2020-36774</changelog>
</package>
<package pkgid="ffe358b4aaf0933b9847150ffdc38518e7468c6eb94695505191544eec8d7676" name="glib2" arch="src">
  <version epoch="0" ver="2.72.2" rel="10.oe2203sp1"/>
  <changelog author="lin zhang &lt;lin.zhang@turbolinux.com.cn&gt; - 2.72.2-1" date="1654516800">- Update to 2.72.2</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 2.72.2-2" date="1655553600">- remove gnutls require</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-3" date="1662379200">- replace pcre1 with pcre2</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-4" date="1665835200">- backport some patches from community</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-5" date="1667995200">- separate the test and static package from devel package</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-6" date="1672142400">- fix some pcre2 error</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-7" date="1673352000">- adjust pcre2 requires</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-8" date="1676548800">- backport some patches from community</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-9" date="1678795200">- fix a use-after-free of GDBusMethodInvocation</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-10" date="1680350400">- fix CVE-2023-24593 and CVE-2023-25180</changelog>
</package>
<package pkgid="fbbd14e3a39a76efad143c80c1fbc621a61aa27b3b2c05fcef9a45a992eb567b" name="glib2" arch="src">
  <version epoch="0" ver="2.72.2" rel="12.oe2203sp1"/>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-3" date="1662379200">- replace pcre1 with pcre2</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-4" date="1665835200">- backport some patches from community</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-5" date="1667995200">- separate the test and static package from devel package</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-6" date="1672142400">- fix some pcre2 error</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-7" date="1673352000">- adjust pcre2 requires</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-8" date="1676548800">- backport some patches from community</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-9" date="1678795200">- fix a use-after-free of GDBusMethodInvocation</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-10" date="1680350400">- fix CVE-2023-24593 and CVE-2023-25180</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-11" date="1692446400">- fix double unref and fix group comment management</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.72.2-12" date="1695643200">- glocalfilemonitor: Avoid file monitor destruction from event thread</changelog>
</package>
<package pkgid="67cd0879b816c56dc7c8c38fcb9460a89bd8479687edef672327ffa583195594" name="glib2" arch="src">
  <version epoch="0" ver="2.72.2" rel="14.oe2203sp1"/>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-5" date="1667995200">- separate the test and static package from devel package</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-6" date="1672142400">- fix some pcre2 error</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-7" date="1673352000">- adjust pcre2 requires</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-8" date="1676548800">- backport some patches from community</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-9" date="1678795200">- fix a use-after-free of GDBusMethodInvocation</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-10" date="1680350400">- fix CVE-2023-24593 and CVE-2023-25180</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-11" date="1692446400">- fix double unref and fix group comment management</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.72.2-12" date="1695643200">- glocalfilemonitor: Avoid file monitor destruction from event thread</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-13" date="1704974400">- fix pcre2 error , memory leak and log domains error</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-14" date="1708344000">- disable sysprof</changelog>
</package>
<package pkgid="e22b3aa2f539e596afbc764df02b3b4a0014c9b79a8770f21dc6ceaa68c7a481" name="glib2" arch="src">
  <version epoch="0" ver="2.72.2" rel="15.oe2203sp1"/>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-6" date="1672142400">- fix some pcre2 error</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-7" date="1673352000">- adjust pcre2 requires</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-8" date="1676548800">- backport some patches from community</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-9" date="1678795200">- fix a use-after-free of GDBusMethodInvocation</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-10" date="1680350400">- fix CVE-2023-24593 and CVE-2023-25180</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-11" date="1692446400">- fix double unref and fix group comment management</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.72.2-12" date="1695643200">- glocalfilemonitor: Avoid file monitor destruction from event thread</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-13" date="1704974400">- fix pcre2 error , memory leak and log domains error</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-14" date="1708344000">- disable sysprof</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-15" date="1718712000">- fix CVE-2024-34397</changelog>
</package>
<package pkgid="2cf822982556830afcc6efda64106e3e313e96bbbbac104bec803a9dedf9c087" name="glib2" arch="src">
  <version epoch="0" ver="2.72.2" rel="8.oe2203sp1"/>
  <changelog author="yanan &lt;yanan@huawei.com&gt; - 2.68.1-12" date="1651147200">- Type:bugfix
- DESC:fix issues found by svace static code analyzer
       fix segfault,memory leak,EOF,arguments leak</changelog>
  <changelog author="lin zhang &lt;lin.zhang@turbolinux.com.cn&gt; - 2.72.0-1" date="1654171200">- Update to 2.72.0</changelog>
  <changelog author="lin zhang &lt;lin.zhang@turbolinux.com.cn&gt; - 2.72.2-1" date="1654516800">- Update to 2.72.2</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 2.72.2-2" date="1655553600">- remove gnutls require</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-3" date="1662379200">- replace pcre1 with pcre2</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-4" date="1665835200">- backport some patches from community</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-5" date="1667995200">- separate the test and static package from devel package</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-6" date="1672142400">- fix some pcre2 error</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-7" date="1673352000">- adjust pcre2 requires</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-8" date="1676548800">- backport some patches from community</changelog>
</package>
<package pkgid="40e0da0c7058286cbd72c2125393cc22bdec7c3867e7266d84f8de95afb24c51" name="glibc" arch="src">
  <version epoch="0" ver="2.34" rel="110.oe2203sp1"/>
  <changelog author="Lv Ying &lt;lvying6@huawei.com&gt; - 2.34-101" date="1669723200">- elf: Fix alloca size in _dl_debug_vdprintf</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-102" date="1670500800">- elf: Do not completely clear reused namespace in dlmopen (bug 29600)
- elf: Remove allocate use on _dl_debug_printf
- elf/tlsdeschtab.h: Add the Malloc return value check in _dl_make_tlsdesc_dynamic()
- Fix OOB read in stdlib thousand grouping parsing [BZ#29727]</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-103" date="1670846400">- io: Fix use after free in ftw (BZ 26779)</changelog>
  <changelog author="lijianglin &lt;lijianglin2@huawei.com&gt; - 2.34-104" date="1671192000">- x86: Fix wcsnlen-avx2 page cross length comparison(BZ #29591)</changelog>
  <changelog author="wanghongliang &lt;wanghongliang@loongson.cn&gt; - 2.34-105" date="1671624000">- LoongArch Port
- Add login-Add-back-libutil-as-an-empty-library.patch from upstream
  to fix libutil build error.
- Add malloc-Fix-malloc-debug-for-2.35-onwards.patch from upstream
  to fix memory bug
- After glibc 2.28,removed libnsl.LoongArch Port in glibc 2.34,not support libnsl.
- Left some test fails in testsuite_whitelist.</changelog>
  <changelog author="Xue Liu &lt;liuxue@loongson.cn&gt; - 2.34-106" date="1674993600">- LoongArch: Optimize some string functions including memcpy, memmove,
  memset, strchr, strchrnul, strcmp, strncmp, ctrcpy, ctrlen, strnlen.</changelog>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-107" date="1675166400">- Fixup testsuite_whitelist for LoongArch.</changelog>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-108" date="1675339200">- Fixup asin and acos errors for LoongArch.</changelog>
  <changelog author="Yang Yanchao &lt;yangyanchao6@huawei.com&gt; - 2.34-109" date="1675684800">- Since the pthread_cond_clockwait@GLIBC_2_28 is introduced in earlier
  versions, this symbol is required to keep the previous items compatible.</changelog>
  <changelog author="Yang Yanchao &lt;yangyanchao6@huawei.com&gt; - 2.34-110" date="1675857600">- fix error patch number</changelog>
</package>
<package pkgid="8704438893cecbf4a4d1b5f9b030a314ae75f60829a1f2e93e9513f42a6773ec" name="glibc" arch="src">
  <version epoch="0" ver="2.34" rel="112.oe2203sp1"/>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-103" date="1670846400">- io: Fix use after free in ftw (BZ 26779)</changelog>
  <changelog author="lijianglin &lt;lijianglin2@huawei.com&gt; - 2.34-104" date="1671192000">- x86: Fix wcsnlen-avx2 page cross length comparison(BZ #29591)</changelog>
  <changelog author="wanghongliang &lt;wanghongliang@loongson.cn&gt; - 2.34-105" date="1671624000">- LoongArch Port
- Add login-Add-back-libutil-as-an-empty-library.patch from upstream
  to fix libutil build error.
- Add malloc-Fix-malloc-debug-for-2.35-onwards.patch from upstream
  to fix memory bug
- After glibc 2.28,removed libnsl.LoongArch Port in glibc 2.34,not support libnsl.
- Left some test fails in testsuite_whitelist.</changelog>
  <changelog author="Xue Liu &lt;liuxue@loongson.cn&gt; - 2.34-106" date="1674993600">- LoongArch: Optimize some string functions including memcpy, memmove,
  memset, strchr, strchrnul, strcmp, strncmp, ctrcpy, ctrlen, strnlen.</changelog>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-107" date="1675166400">- Fixup testsuite_whitelist for LoongArch.</changelog>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-108" date="1675339200">- Fixup asin and acos errors for LoongArch.</changelog>
  <changelog author="Yang Yanchao &lt;yangyanchao6@huawei.com&gt; - 2.34-109" date="1675684800">- Since the pthread_cond_clockwait@GLIBC_2_28 is introduced in earlier
  versions, this symbol is required to keep the previous items compatible.</changelog>
  <changelog author="Yang Yanchao &lt;yangyanchao6@huawei.com&gt; - 2.34-110" date="1675857600">- fix error patch number</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-111" date="1677153600">- gmon: Fix allocated buffer overflow (bug 29444)</changelog>
  <changelog author="Lv Ying &lt;lvying6@huawei.com&gt; - 2.34-112" date="1677326400">- elf/ld.so: ld.so mmap shared object use hugepage new feature and bugfix:
  - feature: support HUGEPAGE_PROBE + hugepageedit mark shared object
    specified segment, just try to use hugepage to mmap specified segment
    instead of all the segments in the shared object
  - bugfix: remove _mmap_hole when ld.so mmap PT_LOAD segment try to use hugepage</changelog>
</package>
<package pkgid="349206680a9ec10fb8b376e0e923dfcde054d6c60812fe4cd4bb6fb72811853f" name="glibc" arch="src">
  <version epoch="0" ver="2.34" rel="136.oe2203sp1"/>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-127" date="1689508800">- time: Fix use-after-free in getdate</changelog>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-128" date="1690545600">- DESC: Add static PIE support for LoongArch</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-129" date="1691409600">- fix Segmentation fault in nss module
- fix nss database check reload and get memleak</changelog>
  <changelog author="liubo&lt;liubo335@huawei.com&gt; - 2.34-130" date="1691582400">- inet fix warn unused result</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-131" date="1692014400">- resolv_conf: release lock on allocation failure (bug 30527)</changelog>
  <changelog author="chenhaixiang&lt;chenhaixiang3@huawei.com&gt; - 2.34-132" date="1693310400">- time: strftime_l: Avoid an unbounded alloca.</changelog>
  <changelog author="Lv Ying&lt;lvying6@huawei.com&gt; - 2.34-133" date="1693396800">- string: strerror must not return NULL (bug 30555)</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-134" date="1695470400">- fix CVE-2023-4813</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-135" date="1695643200">- fix CVE-2023-4806 CVE-2023-5156</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-136" date="1695729600">- fix CVE-2023-5156</changelog>
</package>
<package pkgid="d176694263619515de3875384abe2bfa9d8ec8ec2116a042741c76338f9a7570" name="glibc" arch="src">
  <version epoch="0" ver="2.34" rel="137.oe2203sp1"/>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-128" date="1690545600">- DESC: Add static PIE support for LoongArch</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-129" date="1691409600">- fix Segmentation fault in nss module
- fix nss database check reload and get memleak</changelog>
  <changelog author="liubo&lt;liubo335@huawei.com&gt; - 2.34-130" date="1691582400">- inet fix warn unused result</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-131" date="1692014400">- resolv_conf: release lock on allocation failure (bug 30527)</changelog>
  <changelog author="chenhaixiang&lt;chenhaixiang3@huawei.com&gt; - 2.34-132" date="1693310400">- time: strftime_l: Avoid an unbounded alloca.</changelog>
  <changelog author="Lv Ying&lt;lvying6@huawei.com&gt; - 2.34-133" date="1693396800">- string: strerror must not return NULL (bug 30555)</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-134" date="1695470400">- fix CVE-2023-4813</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-135" date="1695643200">- fix CVE-2023-4806 CVE-2023-5156</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-136" date="1695729600">- fix CVE-2023-5156</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.34-137" date="1696680000">- fix CVE-2023-4911</changelog>
</package>
<package pkgid="a4fbca19198f416c45f479f292aa1bb73c8d57631d13b43ae495295d852c29db" name="glibc" arch="src">
  <version epoch="0" ver="2.34" rel="144.oe2203sp1"/>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-135" date="1695643200">- fix CVE-2023-4806 CVE-2023-5156</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-136" date="1695729600">- fix CVE-2023-5156</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.34-137" date="1696680000">- fix CVE-2023-4911</changelog>
  <changelog author="lijianglin &lt;lijianglin2@huawei.com&gt; - 2.34-138" date="1697457600">- io: Do not implement fstat with fstatat</changelog>
  <changelog author="zhangnaichuan &lt;zhangnaichuan@huawei.com&gt; - 2.34-139" date="1698321600">- posix: Fix some crashes in wordexp</changelog>
  <changelog author="doupengda &lt;doupengda@loongson.cn&gt; - 2.34-140" date="1699531200">- Modify patch 9030 defined multiple times</changelog>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-141" date="1699876800">- Fixup LoongArch Port errors</changelog>
  <changelog author="nicunshu &lt;nicunshu@huawei.com&gt; - 2.34-142" date="1701777600">- add the missing patch to the source package</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-143" date="1702555200">- elf: Handle non-directory name in search path (BZ 31035)</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-144" date="1703851200">- Fix invalid pointer dereference in wcpcpy_chk and wcscpy_chk</changelog>
</package>
<package pkgid="f120364f1e281d9b622e9fbca7af3b920b08a155d75500be648e14cdc906accd" name="glibc" arch="src">
  <version epoch="0" ver="2.34" rel="150.oe2203sp1"/>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-141" date="1699876800">- Fixup LoongArch Port errors</changelog>
  <changelog author="nicunshu &lt;nicunshu@huawei.com&gt; - 2.34-142" date="1701777600">- add the missing patch to the source package</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-143" date="1702555200">- elf: Handle non-directory name in search path (BZ 31035)</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-144" date="1703851200">- Fix invalid pointer dereference in wcpcpy_chk and wcscpy_chk</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-145" date="1705147200">- elf: Add a way to check if tunable is set (BZ 27069)
- malloc: Improve MAP_HUGETLB with glibc.malloc.hugetlb=2</changelog>
  <changelog author="Yang Yanchao &lt;yangyanchao6@huawei.com&gt; - 2.34-146" date="1713873600">- iconv: ISO-2022-CN-EXT: fix out-of-bound writes when writing escape sequence (CVE-2024-2961)</changelog>
  <changelog author="Lixing &lt;lixing@loongson.cn&gt; - 2.34-147" date="1713960000">- Add missing LoongArch relocation type in elf.h</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-148" date="1714392000">- Type:CVE
- ID:CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602
- SUG:NA
- DESC:fix CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaiwe.com&gt; - 2.34-149" date="1714996800">- Type:bugfix
- ID:
- SUG:NA
- DESC:nscd: Use errval, not errno to guide cache update
       nsce :Skip unusable entries in first pass in prune_cache</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-150" date="1715342400">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Add TLS modid reuse test for bug 29039
       elf: Fix TLS modid reuse generation assignment
       elf: Check objname before calling fatal_error
       elf: Fix _dl_debug_vdprintf to work before self-relocation
       elf: ldconfig should skip temporary files created by package managers
       ldconfig: Fixes for skipping temporary files.</changelog>
</package>
<package pkgid="40afc5df82c4cdd38e4256ecf9670fc56968d7ce00450a10f39f49b9fe9052ed" name="glibc" arch="src">
  <version epoch="0" ver="2.34" rel="156.oe2203sp1"/>
  <changelog author="Lixing &lt;lixing@loongson.cn&gt; - 2.34-147" date="1713960000">- Add missing LoongArch relocation type in elf.h</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-148" date="1714392000">- Type:CVE
- ID:CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602
- SUG:NA
- DESC:fix CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaiwe.com&gt; - 2.34-149" date="1714996800">- Type:bugfix
- ID:
- SUG:NA
- DESC:nscd: Use errval, not errno to guide cache update
       nsce :Skip unusable entries in first pass in prune_cache</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-150" date="1715342400">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Add TLS modid reuse test for bug 29039
       elf: Fix TLS modid reuse generation assignment
       elf: Check objname before calling fatal_error
       elf: Fix _dl_debug_vdprintf to work before self-relocation
       elf: ldconfig should skip temporary files created by package managers
       ldconfig: Fixes for skipping temporary files.</changelog>
  <changelog author="hefq343 &lt;fengqing.he@shingroup.cn&gt; - 2.34-151" date="1718625600">- Type:bugfix
- ID:
- SUG:NA
- DESC:fix compile error for ppc64le</changelog>
  <changelog author="chenhaixiang &lt;chenhaixiang3@huawei.com&gt; - 2.34-152" date="1719316800">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Properly align PT_LOAD segments</changelog>
  <changelog author="taoyuxiang &lt;taoyuxiang2@huawei.com&gt; - 2.34-153" date="1721044800">- Type:bugfix
- ID:
- SUG:NA
- DESC:Check the validity of len before mmap</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.34-154" date="1721476800">- Type:bugfix
- ID:
- SUG:NA
- DESC:stdlib: fix grouping verification with multi-byte thousands</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-155" date="1722081600">- Type:bugfix
- ID:
- SUG:NA
- DESC:resolv:Do not wait for no existing second DNS response error</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.34-156" date="1722686400">- Type:bugfix
- ID:
- SUG:NA
- DESC:mktime: improve heuristic for ca-1986 Indiana DST</changelog>
</package>
<package pkgid="0736f5e9af10fc765208b7c02945503d1598a86bc81f22ffbdec622f9afeef78" name="glibc" arch="src">
  <version epoch="0" ver="2.34" rel="157.oe2203sp1"/>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-148" date="1714392000">- Type:CVE
- ID:CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602
- SUG:NA
- DESC:fix CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaiwe.com&gt; - 2.34-149" date="1714996800">- Type:bugfix
- ID:
- SUG:NA
- DESC:nscd: Use errval, not errno to guide cache update
       nsce :Skip unusable entries in first pass in prune_cache</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-150" date="1715342400">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Add TLS modid reuse test for bug 29039
       elf: Fix TLS modid reuse generation assignment
       elf: Check objname before calling fatal_error
       elf: Fix _dl_debug_vdprintf to work before self-relocation
       elf: ldconfig should skip temporary files created by package managers
       ldconfig: Fixes for skipping temporary files.</changelog>
  <changelog author="hefq343 &lt;fengqing.he@shingroup.cn&gt; - 2.34-151" date="1718625600">- Type:bugfix
- ID:
- SUG:NA
- DESC:fix compile error for ppc64le</changelog>
  <changelog author="chenhaixiang &lt;chenhaixiang3@huawei.com&gt; - 2.34-152" date="1719316800">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Properly align PT_LOAD segments</changelog>
  <changelog author="taoyuxiang &lt;taoyuxiang2@huawei.com&gt; - 2.34-153" date="1721044800">- Type:bugfix
- ID:
- SUG:NA
- DESC:Check the validity of len before mmap</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.34-154" date="1721476800">- Type:bugfix
- ID:
- SUG:NA
- DESC:stdlib: fix grouping verification with multi-byte thousands</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-155" date="1722081600">- Type:bugfix
- ID:
- SUG:NA
- DESC:resolv:Do not wait for no existing second DNS response error</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.34-156" date="1722686400">- Type:bugfix
- ID:
- SUG:NA
- DESC:mktime: improve heuristic for ca-1986 Indiana DST</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-157" date="1724155200">- Type:bugfix
- ID:
- SUG:NA
- DESC:enable shared library use huge page for aarch64 architecture
       revert "elf/ld.so: use special mmap for hugepage to get symbols"
       hugepageedit: static-link build
       elf: the hugepage feature of dynamic library keep compatible with llvm lld
       elf: add some debug info for dynamic library hugepage feature</changelog>
</package>
<package pkgid="34ce11203601647f404dc3eb7758a81d4dfb63219a65093cf57874b47129b8d4" name="glusterfs" arch="src">
  <version epoch="0" ver="10.0" rel="8.oe2203sp1"/>
  <changelog author="chenyanpanHW &lt;chenyanpan@huawei.com&gt; - 7.6-2" date="1627646400">- DESC: delete -Sgit from 
%setup       -q



/usr/bin/cat /home/lkp/rpmbuild/SOURCES/0001-SC2081-can-t-match-globs-Use-or-grep.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/0002-fuse-Resolve-asan-bug-in-during-receive-event-notifi.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

, and delete BuildRequires git</changelog>
  <changelog author="Wenchao Hao &lt;haowenchao@huawei.com&gt; - 10.0-1" date="1638360000">- Update to glusterfs-10.0-1</changelog>
  <changelog author="Wenchao Hao &lt;haowenchao@huawei.com&gt; - 10.0-2" date="1643198400">- Remove unnecessary subpackages ganesha and regression-test</changelog>
  <changelog author="Wenchao Hao &lt;haowenchao@huawei.com&gt; - 10.0-3" date="1643198401">- Change gluster-server "Requires" from pyxattr to python3-pyxattr</changelog>
  <changelog author="imxcc &lt;xingchaochao@huawei.com&gt; - 10.0-4" date="1643371200">- tcmalloc issues</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-5" date="1662552000">- SC2081: [ .. ] can't match globs. Use [[ .. ]] or grep.</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-6" date="1666094400">- license: fix license error.</changelog>
  <changelog author="lihaoxiang &lt;lihaoxiang9@huawei.com&gt; - 10.0-7" date="1675771200">- fix upgrade error that /usr/share/man/man8/*gluster*.8* belong to package glusterfs currently conflict with that belong to package help in the lower version.</changelog>
  <changelog author="wuguanghao &lt;wuguanghao3@huawei.com&gt; - 10.0-8" date="1678363200">- fix CVE-2023-26253</changelog>
</package>
<package pkgid="95b0e785dff65d1c58d9c7a8b7ed662ed57287524a798bb1420b1138220ea68f" name="glusterfs" arch="src">
  <version epoch="0" ver="10.0" rel="9.oe2203sp1"/>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-5" date="1662552000">- SC2081: [ .. ] can't match globs. Use [[ .. ]] or grep.</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-6" date="1666094400">- license: fix license error.</changelog>
  <changelog author="lihaoxiang &lt;lihaoxiang9@huawei.com&gt; - 10.0-7" date="1675771200">- fix upgrade error that /usr/share/man/man8/*gluster*.8* belong to package glusterfs currently conflict with that belong to package help in the lower version.</changelog>
  <changelog author="wuguanghao &lt;wuguanghao3@huawei.com&gt; - 10.0-8" date="1678363200">- fix CVE-2023-26253</changelog>
  <changelog author="wuguanghao &lt;wuguanghao3@huawei.com&gt; - 10.0-9" date="1710244800">- fix CVE-2022-48340</changelog>
</package>
<package pkgid="1d9bf62963393583088dc6aa52ef6b4ca1c97cdc894e49e0e189be7974c43567" name="gmp" arch="src">
  <version epoch="1" ver="6.2.1" rel="4.oe2203sp1"/>
  <changelog author="luofeng &lt;luofeng13@huawei.com&gt; - 1:6.2.1-3" date="1699272000">- Support build with clang</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:6.2.1-4" date="1722340800">- move pkgconfig files into devel pacakage</changelog>
</package>
<package pkgid="d83988314385698736549ac790081437b564bd0bf2e46ab306a2a7c0974c1d1d" name="gnuplot" arch="src">
  <version epoch="0" ver="5.0.6" rel="14.oe2203sp1"/>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 5.0.6-13" date="1669118400">- Bring source file into correspondence with described in spec file</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 5.0.6-14" date="1689249600">- Fix CVE-2020-25969</changelog>
</package>
<package pkgid="5fd664bdf1e7b0d97079a67765c5760dcc8c94696169b63b1d0efe47c0ac3390" name="gnutls" arch="src">
  <version epoch="0" ver="3.7.2" rel="10.oe2203sp1"/>
  <changelog author="shangyibin &lt;shangyibin1@huawei.com&gt; - 3.7.2-1" date="1640952000">- update to 3.7.2</changelog>
  <changelog author="tianwei &lt;tianwei12@h-partners.com&gt; - 3.7.2-2" date="1648641600">- detach the sub package gnutls-utils from gnutls</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 3.7.2-3" date="1661774400">- fix CVE-2022-2509</changelog>
  <changelog author="yanglongkang &lt;yanglongkang@h-partners.com&gt; - 3.7.2-4" date="1661860800">- fix CVE-2021-4209</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-5" date="1669118400">- fix incorrect Source in gnutls.spec</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-6" date="1669896000">- disable make check for EBS build</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-7" date="1676548800">- fix CVE-2023-0361</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-8" date="1685448000">- add nettle-devel version</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-9" date="1688040000">- add nettle version restriction</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-10" date="1700481600">- fix CVE-2023-5981</changelog>
</package>
<package pkgid="54cbe4cfa90a93e2730dc028ab96548979e4bab2e7f98f2495b532f820797c9e" name="gnutls" arch="src">
  <version epoch="0" ver="3.7.2" rel="11.oe2203sp1"/>
  <changelog author="tianwei &lt;tianwei12@h-partners.com&gt; - 3.7.2-2" date="1648641600">- detach the sub package gnutls-utils from gnutls</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 3.7.2-3" date="1661774400">- fix CVE-2022-2509</changelog>
  <changelog author="yanglongkang &lt;yanglongkang@h-partners.com&gt; - 3.7.2-4" date="1661860800">- fix CVE-2021-4209</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-5" date="1669118400">- fix incorrect Source in gnutls.spec</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-6" date="1669896000">- disable make check for EBS build</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-7" date="1676548800">- fix CVE-2023-0361</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-8" date="1685448000">- add nettle-devel version</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-9" date="1688040000">- add nettle version restriction</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-10" date="1700481600">- fix CVE-2023-5981</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-11" date="1705492800">- fix CVE-2024-0553 and CVE-2024-0567</changelog>
</package>
<package pkgid="4ae9b332ec375c7eb2af8da8576f605df536e0970c958d3e96a372f91aa71dd9" name="gnutls" arch="src">
  <version epoch="0" ver="3.7.2" rel="13.oe2203sp1"/>
  <changelog author="yanglongkang &lt;yanglongkang@h-partners.com&gt; - 3.7.2-4" date="1661860800">- fix CVE-2021-4209</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-5" date="1669118400">- fix incorrect Source in gnutls.spec</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-6" date="1669896000">- disable make check for EBS build</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-7" date="1676548800">- fix CVE-2023-0361</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-8" date="1685448000">- add nettle-devel version</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-9" date="1688040000">- add nettle version restriction</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-10" date="1700481600">- fix CVE-2023-5981</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-11" date="1705492800">- fix CVE-2024-0553 and CVE-2024-0567</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-12" date="1711195200">- fix CVE-2024-28834</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-13" date="1711454400">- update patch to remove function declare in header file</changelog>
</package>
<package pkgid="168e0117f3014efacc60501e324dda0567f731d30427e097c5e0f0c45e47fe01" name="gnutls" arch="src">
  <version epoch="0" ver="3.7.2" rel="14.oe2203sp1"/>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-5" date="1669118400">- fix incorrect Source in gnutls.spec</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-6" date="1669896000">- disable make check for EBS build</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-7" date="1676548800">- fix CVE-2023-0361</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-8" date="1685448000">- add nettle-devel version</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-9" date="1688040000">- add nettle version restriction</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-10" date="1700481600">- fix CVE-2023-5981</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-11" date="1705492800">- fix CVE-2024-0553 and CVE-2024-0567</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-12" date="1711195200">- fix CVE-2024-28834</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-13" date="1711454400">- update patch to remove function declare in header file</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-14" date="1712664000">- fix CVE-2024-28835</changelog>
</package>
<package pkgid="2de5aab024c825b30f297f25cb837abf7502c2a7f61abb98f88382fa36f6ca07" name="gnutls" arch="src">
  <version epoch="0" ver="3.7.2" rel="7.oe2203sp1"/>
  <changelog author="yixiangzhike &lt;zhangxingliang3@huawei.com&gt; - 3.6.15-3" date="1616414400">- fix CVE-2021-20231 CVE-2021-20232</changelog>
  <changelog author="shangyibin &lt;shangyibin1@huawei.com&gt; - 3.6.15-4" date="1627646400">- remove init_fds test</changelog>
  <changelog author="shangyibin &lt;shangyibin1@huawei.com&gt; - 3.7.2-1" date="1640952000">- update to 3.7.2</changelog>
  <changelog author="tianwei &lt;tianwei12@h-partners.com&gt; - 3.7.2-2" date="1648641600">- detach the sub package gnutls-utils from gnutls</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 3.7.2-3" date="1661774400">- fix CVE-2022-2509</changelog>
  <changelog author="yanglongkang &lt;yanglongkang@h-partners.com&gt; - 3.7.2-4" date="1661860800">- fix CVE-2021-4209</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-5" date="1669118400">- fix incorrect Source in gnutls.spec</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-6" date="1669896000">- disable make check for EBS build</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-7" date="1676548800">- fix CVE-2023-0361</changelog>
</package>
<package pkgid="4c448c6b9a9fed4ca461b753bfc3b68ba63af3657b8c15c54aa856950cff85a7" name="gnutls" arch="src">
  <version epoch="0" ver="3.7.2" rel="9.oe2203sp1"/>
  <changelog author="shangyibin &lt;shangyibin1@huawei.com&gt; - 3.6.15-4" date="1627646400">- remove init_fds test</changelog>
  <changelog author="shangyibin &lt;shangyibin1@huawei.com&gt; - 3.7.2-1" date="1640952000">- update to 3.7.2</changelog>
  <changelog author="tianwei &lt;tianwei12@h-partners.com&gt; - 3.7.2-2" date="1648641600">- detach the sub package gnutls-utils from gnutls</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 3.7.2-3" date="1661774400">- fix CVE-2022-2509</changelog>
  <changelog author="yanglongkang &lt;yanglongkang@h-partners.com&gt; - 3.7.2-4" date="1661860800">- fix CVE-2021-4209</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-5" date="1669118400">- fix incorrect Source in gnutls.spec</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-6" date="1669896000">- disable make check for EBS build</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-7" date="1676548800">- fix CVE-2023-0361</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-8" date="1685448000">- add nettle-devel version</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-9" date="1688040000">- add nettle version restriction</changelog>
</package>
<package pkgid="af71820d00c7f4cede56801127952a055daa72c7874588f12bc9d3014bdb29f9" name="golang" arch="src">
  <version epoch="0" ver="1.17.3" rel="14.oe2203sp1"/>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-5" date="1658836800">- Type:CVE
- CVE:NA
- SUG:NA
- DESC: fix CVE-2022-32148,CVE-2022-1962,CVE-2022-1705,CVE-2022-30633,
	CVE-2022-30635,CVE-2022-30630,CVE-2022-30632,CVE-2022-28131,
	CVE-2022-30631,CVE-2022-30629,CVE-2022-30634</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-6" date="1659960000">- Type:CVE
- CVE:NA
- SUG:NA
- DESC: fix CVE-2022-32189</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-7" date="1660824000">- Type:CVE
- CVE:CVE-2022-29804,CVE-2022-29526
- SUG:NA
- DESC: fix CVE-2022-29804,CVE-2022-29526</changelog>
  <changelog author="hanchao&lt;hanchao47@huawei.com&gt; - 1.17.3-8" date="1662638400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: golang: modify the golang.spec to remove unnecessary files
	from golang-help package</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-9" date="1663243200">- Type:CVE
- CVE:CVE-2022-27664
- SUG:NA
- DESC: fix CVE-2022-27664</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-10" date="1665403200">- Type:CVE
- CVE:CVE-2022-41715,CVE-2022-2880,CVE-2022-2879
- SUG:NA
- DESC: fix CVE-2022-41715,CVE-2022-2880,CVE-2022-2879</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-11" date="1665489600">- Type:CVE
- CVE:CVE-2022-41716
- SUG:NA
- DESC: fix CVE-2022-41716</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-12" date="1665489601">- Type:CVE
- CVE:CVE-2022-41716
- SUG:NA
- DESC: remove hard code and strong dependency of git, subversion and mercurial</changelog>
  <changelog author="wanglimin&lt;wanglimin@xfusion.com&gt; - 1.17.3-13" date="1671278400">- Add string cut</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-14" date="1674216000">- Type:CVE
- CVE:CVE-2022-23806,CVE-2022-23773,CVE-2022-24921,CVE-2021-44716,CVE-2022-23772,CVE-2022-41717
- SUG:NA
- DESC: fix CVE-2022-23806,CVE-2022-23773,CVE-2022-24921,CVE-2021-44716,CVE-2022-23772,CVE-2022-41717</changelog>
</package>
<package pkgid="7e2ad3515d6e947cd6d5a5bb729c7483eb3ff12b507dc6edcfaa1a976266fdad" name="golang" arch="src">
  <version epoch="0" ver="1.17.3" rel="15.oe2203sp1"/>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-6" date="1659960000">- Type:CVE
- CVE:NA
- SUG:NA
- DESC: fix CVE-2022-32189</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-7" date="1660824000">- Type:CVE
- CVE:CVE-2022-29804,CVE-2022-29526
- SUG:NA
- DESC: fix CVE-2022-29804,CVE-2022-29526</changelog>
  <changelog author="hanchao&lt;hanchao47@huawei.com&gt; - 1.17.3-8" date="1662638400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: golang: modify the golang.spec to remove unnecessary files
	from golang-help package</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-9" date="1663243200">- Type:CVE
- CVE:CVE-2022-27664
- SUG:NA
- DESC: fix CVE-2022-27664</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-10" date="1665403200">- Type:CVE
- CVE:CVE-2022-41715,CVE-2022-2880,CVE-2022-2879
- SUG:NA
- DESC: fix CVE-2022-41715,CVE-2022-2880,CVE-2022-2879</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-11" date="1665489600">- Type:CVE
- CVE:CVE-2022-41716
- SUG:NA
- DESC: fix CVE-2022-41716</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-12" date="1665489601">- Type:CVE
- CVE:CVE-2022-41716
- SUG:NA
- DESC: remove hard code and strong dependency of git, subversion and mercurial</changelog>
  <changelog author="wanglimin&lt;wanglimin@xfusion.com&gt; - 1.17.3-13" date="1671278400">- Add string cut</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-14" date="1674216000">- Type:CVE
- CVE:CVE-2022-23806,CVE-2022-23773,CVE-2022-24921,CVE-2021-44716,CVE-2022-23772,CVE-2022-41717
- SUG:NA
- DESC: fix CVE-2022-23806,CVE-2022-23773,CVE-2022-24921,CVE-2021-44716,CVE-2022-23772,CVE-2022-41717</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-15" date="1679400000">- Type:CVE
- CVE:CVE-2022-41723,CVE-2022-41724,CVE-2022-41725
- SUG:NA
- DESC: fix CVE-2022-41723,CVE-2022-41724,CVE-2022-41725</changelog>
</package>
<package pkgid="efbcfb3566188a3a951f049f1a518f10c763031ea8bb831e734c5b9c1e431c36" name="golang" arch="src">
  <version epoch="0" ver="1.17.3" rel="16.oe2203sp1"/>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-7" date="1660824000">- Type:CVE
- CVE:CVE-2022-29804,CVE-2022-29526
- SUG:NA
- DESC: fix CVE-2022-29804,CVE-2022-29526</changelog>
  <changelog author="hanchao&lt;hanchao47@huawei.com&gt; - 1.17.3-8" date="1662638400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: golang: modify the golang.spec to remove unnecessary files
	from golang-help package</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-9" date="1663243200">- Type:CVE
- CVE:CVE-2022-27664
- SUG:NA
- DESC: fix CVE-2022-27664</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-10" date="1665403200">- Type:CVE
- CVE:CVE-2022-41715,CVE-2022-2880,CVE-2022-2879
- SUG:NA
- DESC: fix CVE-2022-41715,CVE-2022-2880,CVE-2022-2879</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-11" date="1665489600">- Type:CVE
- CVE:CVE-2022-41716
- SUG:NA
- DESC: fix CVE-2022-41716</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-12" date="1665489601">- Type:CVE
- CVE:CVE-2022-41716
- SUG:NA
- DESC: remove hard code and strong dependency of git, subversion and mercurial</changelog>
  <changelog author="wanglimin&lt;wanglimin@xfusion.com&gt; - 1.17.3-13" date="1671278400">- Add string cut</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-14" date="1674216000">- Type:CVE
- CVE:CVE-2022-23806,CVE-2022-23773,CVE-2022-24921,CVE-2021-44716,CVE-2022-23772,CVE-2022-41717
- SUG:NA
- DESC: fix CVE-2022-23806,CVE-2022-23773,CVE-2022-24921,CVE-2021-44716,CVE-2022-23772,CVE-2022-41717</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-15" date="1679400000">- Type:CVE
- CVE:CVE-2022-41723,CVE-2022-41724,CVE-2022-41725
- SUG:NA
- DESC: fix CVE-2022-41723,CVE-2022-41724,CVE-2022-41725</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-16" date="1681387200">- Type:CVE
- CVE:CVE-2023-24534,CVE-2023-24536,CVE-2023-24537,CVE-2023-24538
- SUG:NA
- DESC: fix CVE-2023-24534,CVE-2023-24536,CVE-2023-24537,CVE-2023-24538</changelog>
</package>
<package pkgid="f98af8f1e1e8724b0ff24bfb1bb9d00a3e74d3f8a8e5b88d347de7f9f3690b6c" name="golang" arch="src">
  <version epoch="0" ver="1.17.3" rel="18.oe2203sp1"/>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-9" date="1663243200">- Type:CVE
- CVE:CVE-2022-27664
- SUG:NA
- DESC: fix CVE-2022-27664</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-10" date="1665403200">- Type:CVE
- CVE:CVE-2022-41715,CVE-2022-2880,CVE-2022-2879
- SUG:NA
- DESC: fix CVE-2022-41715,CVE-2022-2880,CVE-2022-2879</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-11" date="1665489600">- Type:CVE
- CVE:CVE-2022-41716
- SUG:NA
- DESC: fix CVE-2022-41716</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-12" date="1665489601">- Type:CVE
- CVE:CVE-2022-41716
- SUG:NA
- DESC: remove hard code and strong dependency of git, subversion and mercurial</changelog>
  <changelog author="wanglimin&lt;wanglimin@xfusion.com&gt; - 1.17.3-13" date="1671278400">- Add string cut</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-14" date="1674216000">- Type:CVE
- CVE:CVE-2022-23806,CVE-2022-23773,CVE-2022-24921,CVE-2021-44716,CVE-2022-23772,CVE-2022-41717
- SUG:NA
- DESC: fix CVE-2022-23806,CVE-2022-23773,CVE-2022-24921,CVE-2021-44716,CVE-2022-23772,CVE-2022-41717</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-15" date="1679400000">- Type:CVE
- CVE:CVE-2022-41723,CVE-2022-41724,CVE-2022-41725
- SUG:NA
- DESC: fix CVE-2022-41723,CVE-2022-41724,CVE-2022-41725</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-16" date="1681387200">- Type:CVE
- CVE:CVE-2023-24534,CVE-2023-24536,CVE-2023-24537,CVE-2023-24538
- SUG:NA
- DESC: fix CVE-2023-24534,CVE-2023-24536,CVE-2023-24537,CVE-2023-24538</changelog>
  <changelog author="penghaitao &lt;htpengc@isoftstone.com&gt; - 1.17.3-17" date="1682251200">- fix bogus date in %changelog</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-18" date="1684756800">- Type:CVE
- CVE:CVE-2023-29400,CVE-2023-24539,CVE-2023-24540
- SUG:NA
- DESC: fix CVE-2023-29400,CVE-2023-24539,CVE-2023-24540</changelog>
</package>
<package pkgid="bd4d55db376331f9e1f273558e1eb29784df3e6d86066c2eb543fba5540e37b5" name="golang" arch="src">
  <version epoch="0" ver="1.17.3" rel="19.oe2203sp1"/>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-10" date="1665403200">- Type:CVE
- CVE:CVE-2022-41715,CVE-2022-2880,CVE-2022-2879
- SUG:NA
- DESC: fix CVE-2022-41715,CVE-2022-2880,CVE-2022-2879</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-11" date="1665489600">- Type:CVE
- CVE:CVE-2022-41716
- SUG:NA
- DESC: fix CVE-2022-41716</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-12" date="1665489601">- Type:CVE
- CVE:CVE-2022-41716
- SUG:NA
- DESC: remove hard code and strong dependency of git, subversion and mercurial</changelog>
  <changelog author="wanglimin&lt;wanglimin@xfusion.com&gt; - 1.17.3-13" date="1671278400">- Add string cut</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-14" date="1674216000">- Type:CVE
- CVE:CVE-2022-23806,CVE-2022-23773,CVE-2022-24921,CVE-2021-44716,CVE-2022-23772,CVE-2022-41717
- SUG:NA
- DESC: fix CVE-2022-23806,CVE-2022-23773,CVE-2022-24921,CVE-2021-44716,CVE-2022-23772,CVE-2022-41717</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-15" date="1679400000">- Type:CVE
- CVE:CVE-2022-41723,CVE-2022-41724,CVE-2022-41725
- SUG:NA
- DESC: fix CVE-2022-41723,CVE-2022-41724,CVE-2022-41725</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-16" date="1681387200">- Type:CVE
- CVE:CVE-2023-24534,CVE-2023-24536,CVE-2023-24537,CVE-2023-24538
- SUG:NA
- DESC: fix CVE-2023-24534,CVE-2023-24536,CVE-2023-24537,CVE-2023-24538</changelog>
  <changelog author="penghaitao &lt;htpengc@isoftstone.com&gt; - 1.17.3-17" date="1682251200">- fix bogus date in %changelog</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-18" date="1684756800">- Type:CVE
- CVE:CVE-2023-29400,CVE-2023-24539,CVE-2023-24540
- SUG:NA
- DESC: fix CVE-2023-29400,CVE-2023-24539,CVE-2023-24540</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-19" date="1687348800">- Type:CVE
- CVE:CVE-2023-29402,CVE-2023-29403,CVE-2023-29404,CVE-2023-29405
- SUG:NA
- DESC:fix CVE-2023-29402,CVE-2023-29403,CVE-2023-29404,CVE-2023-29405</changelog>
</package>
<package pkgid="56434a987539ca7bd25ce8b2c6dccb02488b18525e59fc7d177dbf1e5e48e88b" name="golang" arch="src">
  <version epoch="0" ver="1.17.3" rel="20.oe2203sp1"/>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-11" date="1665489600">- Type:CVE
- CVE:CVE-2022-41716
- SUG:NA
- DESC: fix CVE-2022-41716</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-12" date="1665489601">- Type:CVE
- CVE:CVE-2022-41716
- SUG:NA
- DESC: remove hard code and strong dependency of git, subversion and mercurial</changelog>
  <changelog author="wanglimin&lt;wanglimin@xfusion.com&gt; - 1.17.3-13" date="1671278400">- Add string cut</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-14" date="1674216000">- Type:CVE
- CVE:CVE-2022-23806,CVE-2022-23773,CVE-2022-24921,CVE-2021-44716,CVE-2022-23772,CVE-2022-41717
- SUG:NA
- DESC: fix CVE-2022-23806,CVE-2022-23773,CVE-2022-24921,CVE-2021-44716,CVE-2022-23772,CVE-2022-41717</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-15" date="1679400000">- Type:CVE
- CVE:CVE-2022-41723,CVE-2022-41724,CVE-2022-41725
- SUG:NA
- DESC: fix CVE-2022-41723,CVE-2022-41724,CVE-2022-41725</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-16" date="1681387200">- Type:CVE
- CVE:CVE-2023-24534,CVE-2023-24536,CVE-2023-24537,CVE-2023-24538
- SUG:NA
- DESC: fix CVE-2023-24534,CVE-2023-24536,CVE-2023-24537,CVE-2023-24538</changelog>
  <changelog author="penghaitao &lt;htpengc@isoftstone.com&gt; - 1.17.3-17" date="1682251200">- fix bogus date in %changelog</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-18" date="1684756800">- Type:CVE
- CVE:CVE-2023-29400,CVE-2023-24539,CVE-2023-24540
- SUG:NA
- DESC: fix CVE-2023-29400,CVE-2023-24539,CVE-2023-24540</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-19" date="1687348800">- Type:CVE
- CVE:CVE-2023-29402,CVE-2023-29403,CVE-2023-29404,CVE-2023-29405
- SUG:NA
- DESC:fix CVE-2023-29402,CVE-2023-29403,CVE-2023-29404,CVE-2023-29405</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-20" date="1689940800">- Type:CVE
- CVE:CVE-2023-29406
- SUG:NA
- DESC:fix CVE-2023-29406</changelog>
</package>
<package pkgid="af85d87182f6f54863cf546ab0448737dc90df6f7e3193955499342829d62c1a" name="golang" arch="src">
  <version epoch="0" ver="1.17.3" rel="21.oe2203sp1"/>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-12" date="1665489600">- Type:CVE
- CVE:CVE-2022-41716
- SUG:NA
- DESC: remove hard code and strong dependency of git, subversion and mercurial</changelog>
  <changelog author="wanglimin&lt;wanglimin@xfusion.com&gt; - 1.17.3-13" date="1671278400">- Add string cut</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-14" date="1674216000">- Type:CVE
- CVE:CVE-2022-23806,CVE-2022-23773,CVE-2022-24921,CVE-2021-44716,CVE-2022-23772,CVE-2022-41717
- SUG:NA
- DESC: fix CVE-2022-23806,CVE-2022-23773,CVE-2022-24921,CVE-2021-44716,CVE-2022-23772,CVE-2022-41717</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-15" date="1679400000">- Type:CVE
- CVE:CVE-2022-41723,CVE-2022-41724,CVE-2022-41725
- SUG:NA
- DESC: fix CVE-2022-41723,CVE-2022-41724,CVE-2022-41725</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-16" date="1681387200">- Type:CVE
- CVE:CVE-2023-24534,CVE-2023-24536,CVE-2023-24537,CVE-2023-24538
- SUG:NA
- DESC: fix CVE-2023-24534,CVE-2023-24536,CVE-2023-24537,CVE-2023-24538</changelog>
  <changelog author="penghaitao &lt;htpengc@isoftstone.com&gt; - 1.17.3-17" date="1682251200">- fix bogus date in %changelog</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-18" date="1684756800">- Type:CVE
- CVE:CVE-2023-29400,CVE-2023-24539,CVE-2023-24540
- SUG:NA
- DESC: fix CVE-2023-29400,CVE-2023-24539,CVE-2023-24540</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-19" date="1687348800">- Type:CVE
- CVE:CVE-2023-29402,CVE-2023-29403,CVE-2023-29404,CVE-2023-29405
- SUG:NA
- DESC:fix CVE-2023-29402,CVE-2023-29403,CVE-2023-29404,CVE-2023-29405</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-20" date="1689940800">- Type:CVE
- CVE:CVE-2023-29406
- SUG:NA
- DESC:fix CVE-2023-29406</changelog>
  <changelog author="luoyujie &lt;luoyujie5@huawei.com&gt; - 1.17.3-21" date="1692014400">- Type:CVE
- CVE:CVE-2023-29409
- SUG:NA
- DESC:fix CVE-2023-29409</changelog>
</package>
<package pkgid="4618fc9e2bda9be2331e64176864d2a80687d4b312bb9cb8ff84e3581afe7d4d" name="golang" arch="src">
  <version epoch="0" ver="1.17.3" rel="22.oe2203sp1"/>
  <changelog author="wanglimin&lt;wanglimin@xfusion.com&gt; - 1.17.3-13" date="1671278400">- Add string cut</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-14" date="1674216000">- Type:CVE
- CVE:CVE-2022-23806,CVE-2022-23773,CVE-2022-24921,CVE-2021-44716,CVE-2022-23772,CVE-2022-41717
- SUG:NA
- DESC: fix CVE-2022-23806,CVE-2022-23773,CVE-2022-24921,CVE-2021-44716,CVE-2022-23772,CVE-2022-41717</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-15" date="1679400000">- Type:CVE
- CVE:CVE-2022-41723,CVE-2022-41724,CVE-2022-41725
- SUG:NA
- DESC: fix CVE-2022-41723,CVE-2022-41724,CVE-2022-41725</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-16" date="1681387200">- Type:CVE
- CVE:CVE-2023-24534,CVE-2023-24536,CVE-2023-24537,CVE-2023-24538
- SUG:NA
- DESC: fix CVE-2023-24534,CVE-2023-24536,CVE-2023-24537,CVE-2023-24538</changelog>
  <changelog author="penghaitao &lt;htpengc@isoftstone.com&gt; - 1.17.3-17" date="1682251200">- fix bogus date in %changelog</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-18" date="1684756800">- Type:CVE
- CVE:CVE-2023-29400,CVE-2023-24539,CVE-2023-24540
- SUG:NA
- DESC: fix CVE-2023-29400,CVE-2023-24539,CVE-2023-24540</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-19" date="1687348800">- Type:CVE
- CVE:CVE-2023-29402,CVE-2023-29403,CVE-2023-29404,CVE-2023-29405
- SUG:NA
- DESC:fix CVE-2023-29402,CVE-2023-29403,CVE-2023-29404,CVE-2023-29405</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-20" date="1689940800">- Type:CVE
- CVE:CVE-2023-29406
- SUG:NA
- DESC:fix CVE-2023-29406</changelog>
  <changelog author="luoyujie &lt;luoyujie5@huawei.com&gt; - 1.17.3-21" date="1692014400">- Type:CVE
- CVE:CVE-2023-29409
- SUG:NA
- DESC:fix CVE-2023-29409</changelog>
  <changelog author="sunchendong &lt;sunchendong@xfusion.com&gt; - 1.17.3-22" date="1692964800">- permit invalid host header for docker</changelog>
</package>
<package pkgid="4ccaef23f1b63421334f1706c307c14773a8b157183e22e63c23a37f08ade912" name="golang" arch="src">
  <version epoch="0" ver="1.17.3" rel="25.oe2203sp1"/>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-16" date="1681387200">- Type:CVE
- CVE:CVE-2023-24534,CVE-2023-24536,CVE-2023-24537,CVE-2023-24538
- SUG:NA
- DESC: fix CVE-2023-24534,CVE-2023-24536,CVE-2023-24537,CVE-2023-24538</changelog>
  <changelog author="penghaitao &lt;htpengc@isoftstone.com&gt; - 1.17.3-17" date="1682251200">- fix bogus date in %changelog</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-18" date="1684756800">- Type:CVE
- CVE:CVE-2023-29400,CVE-2023-24539,CVE-2023-24540
- SUG:NA
- DESC: fix CVE-2023-29400,CVE-2023-24539,CVE-2023-24540</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-19" date="1687348800">- Type:CVE
- CVE:CVE-2023-29402,CVE-2023-29403,CVE-2023-29404,CVE-2023-29405
- SUG:NA
- DESC:fix CVE-2023-29402,CVE-2023-29403,CVE-2023-29404,CVE-2023-29405</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-20" date="1689940800">- Type:CVE
- CVE:CVE-2023-29406
- SUG:NA
- DESC:fix CVE-2023-29406</changelog>
  <changelog author="luoyujie &lt;luoyujie5@huawei.com&gt; - 1.17.3-21" date="1692014400">- Type:CVE
- CVE:CVE-2023-29409
- SUG:NA
- DESC:fix CVE-2023-29409</changelog>
  <changelog author="sunchendong &lt;sunchendong@xfusion.com&gt; - 1.17.3-22" date="1692964800">- permit invalid host header for docker</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-23" date="1695124800">- Type:CVE
- CVE:CVE-2023-39318,CVE-2023-39319
- SUG:NA
- DESC:fix CVE-2023-39318 and CVE-2023-39319</changelog>
  <changelog author="luoyujie &lt;luoyujie5@huawei.com&gt; - 1.17.3-24" date="1697198400">- Type:CVE
- CVE:CVE-2023-39323
- SUG:NA
- DESC:fix CVE-2023-39323</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-25" date="1698062400">- Type:CVE
- CVE:CVE-2023-39325
- SUG:NA
- DESC:fix CVE-2023-39325</changelog>
</package>
<package pkgid="1198fde37b0f832ae3e38180b11c386df8025a5fd42f56840e3c8e822167336a" name="golang" arch="src">
  <version epoch="0" ver="1.17.3" rel="26.oe2203sp1"/>
  <changelog author="penghaitao &lt;htpengc@isoftstone.com&gt; - 1.17.3-17" date="1682251200">- fix bogus date in %changelog</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-18" date="1684756800">- Type:CVE
- CVE:CVE-2023-29400,CVE-2023-24539,CVE-2023-24540
- SUG:NA
- DESC: fix CVE-2023-29400,CVE-2023-24539,CVE-2023-24540</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-19" date="1687348800">- Type:CVE
- CVE:CVE-2023-29402,CVE-2023-29403,CVE-2023-29404,CVE-2023-29405
- SUG:NA
- DESC:fix CVE-2023-29402,CVE-2023-29403,CVE-2023-29404,CVE-2023-29405</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-20" date="1689940800">- Type:CVE
- CVE:CVE-2023-29406
- SUG:NA
- DESC:fix CVE-2023-29406</changelog>
  <changelog author="luoyujie &lt;luoyujie5@huawei.com&gt; - 1.17.3-21" date="1692014400">- Type:CVE
- CVE:CVE-2023-29409
- SUG:NA
- DESC:fix CVE-2023-29409</changelog>
  <changelog author="sunchendong &lt;sunchendong@xfusion.com&gt; - 1.17.3-22" date="1692964800">- permit invalid host header for docker</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-23" date="1695124800">- Type:CVE
- CVE:CVE-2023-39318,CVE-2023-39319
- SUG:NA
- DESC:fix CVE-2023-39318 and CVE-2023-39319</changelog>
  <changelog author="luoyujie &lt;luoyujie5@huawei.com&gt; - 1.17.3-24" date="1697198400">- Type:CVE
- CVE:CVE-2023-39323
- SUG:NA
- DESC:fix CVE-2023-39323</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-25" date="1698062400">- Type:CVE
- CVE:CVE-2023-39325
- SUG:NA
- DESC:fix CVE-2023-39325</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-26" date="1702641600">- Type:CVE
- CVE:CVE-2023-39326,CVE-2023-45285
- SUG:NA
- DESC:fix CVE-2023-39326,CVE-2023-45285</changelog>
</package>
<package pkgid="d28cf5ad346a83657f9cc6dc065a17764b8f065e2f0e85792504f697e8d8f295" name="golang" arch="src">
  <version epoch="0" ver="1.17.3" rel="28.oe2203sp1"/>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-19" date="1687348800">- Type:CVE
- CVE:CVE-2023-29402,CVE-2023-29403,CVE-2023-29404,CVE-2023-29405
- SUG:NA
- DESC:fix CVE-2023-29402,CVE-2023-29403,CVE-2023-29404,CVE-2023-29405</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-20" date="1689940800">- Type:CVE
- CVE:CVE-2023-29406
- SUG:NA
- DESC:fix CVE-2023-29406</changelog>
  <changelog author="luoyujie &lt;luoyujie5@huawei.com&gt; - 1.17.3-21" date="1692014400">- Type:CVE
- CVE:CVE-2023-29409
- SUG:NA
- DESC:fix CVE-2023-29409</changelog>
  <changelog author="sunchendong &lt;sunchendong@xfusion.com&gt; - 1.17.3-22" date="1692964800">- permit invalid host header for docker</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-23" date="1695124800">- Type:CVE
- CVE:CVE-2023-39318,CVE-2023-39319
- SUG:NA
- DESC:fix CVE-2023-39318 and CVE-2023-39319</changelog>
  <changelog author="luoyujie &lt;luoyujie5@huawei.com&gt; - 1.17.3-24" date="1697198400">- Type:CVE
- CVE:CVE-2023-39323
- SUG:NA
- DESC:fix CVE-2023-39323</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-25" date="1698062400">- Type:CVE
- CVE:CVE-2023-39325
- SUG:NA
- DESC:fix CVE-2023-39325</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-26" date="1702641600">- Type:CVE
- CVE:CVE-2023-39326,CVE-2023-45285
- SUG:NA
- DESC:fix CVE-2023-39326,CVE-2023-45285</changelog>
  <changelog author="wangshuo &lt;wangshuo@kylinos.cn&gt; - 1.17.3-27" date="1705406400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix test error about mod_insecure_issue63845</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-28" date="1710504000">- Type:CVE
- CVE:CVE-2024-24783,CVE-2024-24785,CVE-2023-45290,CVE-2023-45289
- SUG:NA
- DESC:fix CVE-2024-24783,CVE-2024-24785,CVE-2023-45290,CVE-2023-45289</changelog>
</package>
<package pkgid="b1ca2b31ed4c4afe1c47588d350b84de45eb2322471a1beb258b1e3bf9f5fa25" name="golang" arch="src">
  <version epoch="0" ver="1.17.3" rel="30.oe2203sp1"/>
  <changelog author="luoyujie &lt;luoyujie5@huawei.com&gt; - 1.17.3-21" date="1692014400">- Type:CVE
- CVE:CVE-2023-29409
- SUG:NA
- DESC:fix CVE-2023-29409</changelog>
  <changelog author="sunchendong &lt;sunchendong@xfusion.com&gt; - 1.17.3-22" date="1692964800">- permit invalid host header for docker</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-23" date="1695124800">- Type:CVE
- CVE:CVE-2023-39318,CVE-2023-39319
- SUG:NA
- DESC:fix CVE-2023-39318 and CVE-2023-39319</changelog>
  <changelog author="luoyujie &lt;luoyujie5@huawei.com&gt; - 1.17.3-24" date="1697198400">- Type:CVE
- CVE:CVE-2023-39323
- SUG:NA
- DESC:fix CVE-2023-39323</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-25" date="1698062400">- Type:CVE
- CVE:CVE-2023-39325
- SUG:NA
- DESC:fix CVE-2023-39325</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-26" date="1702641600">- Type:CVE
- CVE:CVE-2023-39326,CVE-2023-45285
- SUG:NA
- DESC:fix CVE-2023-39326,CVE-2023-45285</changelog>
  <changelog author="wangshuo &lt;wangshuo@kylinos.cn&gt; - 1.17.3-27" date="1705406400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix test error about mod_insecure_issue63845</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-28" date="1710504000">- Type:CVE
- CVE:CVE-2024-24783,CVE-2024-24785,CVE-2023-45290,CVE-2023-45289
- SUG:NA
- DESC:fix CVE-2024-24783,CVE-2024-24785,CVE-2023-45290,CVE-2023-45289</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-29" date="1711540800">- Type:bugfix
- CVE:
- SUG:NA
- DESC:fix failure of `net/http` unit test and enable go unit test</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-30" date="1711540801">- Type:CVE
- CVE:CVE-2024-24784
- SUG:NA
- DESC:fix CVE-2024-24784</changelog>
</package>
<package pkgid="d5d8295d7ab2773a1cc95905b1dfbb644bd8ff4ded6bdf2a3475276ce8ae4f1c" name="golang" arch="src">
  <version epoch="0" ver="1.17.3" rel="32.oe2203sp1"/>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-23" date="1695124800">- Type:CVE
- CVE:CVE-2023-39318,CVE-2023-39319
- SUG:NA
- DESC:fix CVE-2023-39318 and CVE-2023-39319</changelog>
  <changelog author="luoyujie &lt;luoyujie5@huawei.com&gt; - 1.17.3-24" date="1697198400">- Type:CVE
- CVE:CVE-2023-39323
- SUG:NA
- DESC:fix CVE-2023-39323</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-25" date="1698062400">- Type:CVE
- CVE:CVE-2023-39325
- SUG:NA
- DESC:fix CVE-2023-39325</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-26" date="1702641600">- Type:CVE
- CVE:CVE-2023-39326,CVE-2023-45285
- SUG:NA
- DESC:fix CVE-2023-39326,CVE-2023-45285</changelog>
  <changelog author="wangshuo &lt;wangshuo@kylinos.cn&gt; - 1.17.3-27" date="1705406400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix test error about mod_insecure_issue63845</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-28" date="1710504000">- Type:CVE
- CVE:CVE-2024-24783,CVE-2024-24785,CVE-2023-45290,CVE-2023-45289
- SUG:NA
- DESC:fix CVE-2024-24783,CVE-2024-24785,CVE-2023-45290,CVE-2023-45289</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-29" date="1711540800">- Type:bugfix
- CVE:
- SUG:NA
- DESC:fix failure of `net/http` unit test and enable go unit test</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-30" date="1711540801">- Type:CVE
- CVE:CVE-2024-24784
- SUG:NA
- DESC:fix CVE-2024-24784</changelog>
  <changelog author="wangshuo &lt;wangshuo@kylinos.cn&gt; - 1.17.3-31" date="1711713600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:backport the upstream patch, fix the overflow issue in runtime.netpollWaiters</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-32" date="1713268800">- Type:CVE
- CVE:CVE-2023-45288
- SUG:NA
- DESC:fix CVE-2023-45288</changelog>
</package>
<package pkgid="b30148ec24bbf43f279aeede0f02eebd1a0134a214730dd61c12575671214263" name="golang" arch="src">
  <version epoch="0" ver="1.17.3" rel="34.oe2203sp1"/>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-25" date="1698062400">- Type:CVE
- CVE:CVE-2023-39325
- SUG:NA
- DESC:fix CVE-2023-39325</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-26" date="1702641600">- Type:CVE
- CVE:CVE-2023-39326,CVE-2023-45285
- SUG:NA
- DESC:fix CVE-2023-39326,CVE-2023-45285</changelog>
  <changelog author="wangshuo &lt;wangshuo@kylinos.cn&gt; - 1.17.3-27" date="1705406400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix test error about mod_insecure_issue63845</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-28" date="1710504000">- Type:CVE
- CVE:CVE-2024-24783,CVE-2024-24785,CVE-2023-45290,CVE-2023-45289
- SUG:NA
- DESC:fix CVE-2024-24783,CVE-2024-24785,CVE-2023-45290,CVE-2023-45289</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-29" date="1711540800">- Type:bugfix
- CVE:
- SUG:NA
- DESC:fix failure of `net/http` unit test and enable go unit test</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-30" date="1711540801">- Type:CVE
- CVE:CVE-2024-24784
- SUG:NA
- DESC:fix CVE-2024-24784</changelog>
  <changelog author="wangshuo &lt;wangshuo@kylinos.cn&gt; - 1.17.3-31" date="1711713600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:backport the upstream patch, fix the overflow issue in runtime.netpollWaiters</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-32" date="1713268800">- Type:CVE
- CVE:CVE-2023-45288
- SUG:NA
- DESC:fix CVE-2023-45288</changelog>
  <changelog author="lujingxiao &lt;lujingxiao@huawei.com&gt; - 1.17.3-33" date="1716811200">- Type:CVE
- CVE:CVE-2024-24787
- SUG:NA
- DESC:fix CVE-2024-24787</changelog>
  <changelog author="yangjiaqi &lt;yangjiaqi16@huawei.com&gt; - 1.17.3-34" date="1719230400">- Type:CVE
- CVE:CVE-2024-24789
- SUG:NA
- DESC:fix CVE-2024-24789</changelog>
</package>
<package pkgid="4a2bbd3f33f57ede5d1287392a5d35e6231da884cbe5ae752c49838cdaa13293" name="golang" arch="src">
  <version epoch="0" ver="1.17.3" rel="35.oe2203sp1"/>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-26" date="1702641600">- Type:CVE
- CVE:CVE-2023-39326,CVE-2023-45285
- SUG:NA
- DESC:fix CVE-2023-39326,CVE-2023-45285</changelog>
  <changelog author="wangshuo &lt;wangshuo@kylinos.cn&gt; - 1.17.3-27" date="1705406400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix test error about mod_insecure_issue63845</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-28" date="1710504000">- Type:CVE
- CVE:CVE-2024-24783,CVE-2024-24785,CVE-2023-45290,CVE-2023-45289
- SUG:NA
- DESC:fix CVE-2024-24783,CVE-2024-24785,CVE-2023-45290,CVE-2023-45289</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-29" date="1711540800">- Type:bugfix
- CVE:
- SUG:NA
- DESC:fix failure of `net/http` unit test and enable go unit test</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-30" date="1711540801">- Type:CVE
- CVE:CVE-2024-24784
- SUG:NA
- DESC:fix CVE-2024-24784</changelog>
  <changelog author="wangshuo &lt;wangshuo@kylinos.cn&gt; - 1.17.3-31" date="1711713600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:backport the upstream patch, fix the overflow issue in runtime.netpollWaiters</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-32" date="1713268800">- Type:CVE
- CVE:CVE-2023-45288
- SUG:NA
- DESC:fix CVE-2023-45288</changelog>
  <changelog author="lujingxiao &lt;lujingxiao@huawei.com&gt; - 1.17.3-33" date="1716811200">- Type:CVE
- CVE:CVE-2024-24787
- SUG:NA
- DESC:fix CVE-2024-24787</changelog>
  <changelog author="yangjiaqi &lt;yangjiaqi16@huawei.com&gt; - 1.17.3-34" date="1719230400">- Type:CVE
- CVE:CVE-2024-24789
- SUG:NA
- DESC:fix CVE-2024-24789</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-35" date="1722945600">- Type:CVE
- CVE:CVE-2024-24791
- SUG:NA
- DESC:fix CVE-2024-24791</changelog>
</package>
<package pkgid="94272f238bc0a7ad63aad1b60972ad84554497f9eb7ab1f72fccb594baf7a130" name="gpgme" arch="src">
  <version epoch="0" ver="1.16.0" rel="3.oe2203sp1"/>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.16.0-2" date="1666094400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix the URL of source code</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.16.0-3" date="1709726400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add gpgme.pc file</changelog>
</package>
<package pkgid="e506edc096614d298020b170448592825890293494aa4b71a128c8fe39c3ed77" name="graphviz" arch="src">
  <version epoch="0" ver="2.48.0" rel="5.oe2203sp1"/>
  <changelog author="huajingyun &lt;huajingyun@loongson.cn&gt; - 2.48.0-3" date="1669032000">- add loongarch support</changelog>
  <changelog author="haomimi &lt;haomimi@uniontech.com&gt; - 2.48.0-4" date="1689768000">- add sw_64 support</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.48.0-5" date="1706875200">- Fix CVE-2023-46045</changelog>
</package>
<package pkgid="f52993c172bd330dfa35477bb69de86806307064d9d8c1b36906d027eb11c8b2" name="grep" arch="src">
  <version epoch="0" ver="3.7" rel="9.oe2203sp1"/>
  <changelog author="yangzhuangzhuang &lt;yangzhuangzhuang1@huawei.com&gt; - 3.7-1" date="1638014400">- update version to 3.7</changelog>
  <changelog author="yangzhuangzhuang &lt;yangzhuangzhuang1@h-partners.com&gt; - 3.7-2" date="1644321600">- avoid sticky problem with '-f - -f -'</changelog>
  <changelog author="yangzhuangzhuang &lt;yangzhuangzhuang1@h-partners.com&gt; - 3.7-3" date="1647604800">- The -s option no longer suppresses "binary file matches" messages</changelog>
  <changelog author="licihua &lt;licihua@huawei.com&gt; -3.7-4" date="1652961600">- Added coloring aliases to fgrep egrep and grep</changelog>
  <changelog author="gaoruoshu &lt;gaoruoshu@huawei.com&gt; - 3.7-5" date="1672056000">- backport patch from upstream</changelog>
  <changelog author="renchunhui &lt;renchunhui2@huawei.com&gt; - 3.7-6" date="1680523200">- backport patch from upstream</changelog>
  <changelog author="gaoruoshu &lt;gaoruoshu@huawei.com&gt; - 3.7-7" date="1682337600">- pcre: use UCP in UTF mode</changelog>
  <changelog author="zhoupengcheng &lt;zhoupengcheng11@huawei.com&gt; - 3.7-8" date="1699272000">- Modify the dependency from pcre to pcre2 and fix bug</changelog>
  <changelog author="zhoupengcheng &lt;zhoupengcheng11@huawei.com&gt; - 3.7-9" date="1699358400">- rename colorgrep.sh to color_grep.sh</changelog>
</package>
<package pkgid="61cd45c29fb42759a9c61a5606c2dd6045fab6c1626896b3fdccb5de61971dab" name="groff" arch="src">
  <version epoch="0" ver="1.22.4" rel="12.oe2203sp1"/>
  <changelog author="yanglongkang &lt;yanglongkang@h-partners.com&gt; - 1.22.4-10" date="1666699200">- rebuild for next release</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@kylinsec.com.cn&gt; - 1.22.4-11" date="1681214400">- fix groff build failed</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 1.22.4-12" date="1712577600">- Avoid reading from invalid memory upon failure to open an input file</changelog>
</package>
<package pkgid="44bf78b700e1bd4ef7aab6690eccd2b212e87c34d67f450e8501acd878d2ddcb" name="groovy" arch="src">
  <version epoch="0" ver="2.4.8" rel="12.oe2203sp1"/>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt;  - 2.4.8-11" date="1668081600">- Change source</changelog>
  <changelog author="Ge Wang &lt;wang__ge@126.com&gt; - 2.4.8-12" date="1708430400">- Compatible adapter for version 1.8</changelog>
</package>
<package pkgid="0f6afad537e9cabd804b8b1d48dbf8e023fd1c00be69a9f58a4939f363fcb85d" name="groovy18" arch="src">
  <version epoch="0" ver="1.8.9" rel="3.oe2203sp1"/>
  <changelog author="Ge Wang &lt;wang__ge@126.com&gt; - 1.8.9-2" date="1708430400">- Replace run with exec</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 1.8.9-3" date="1708948800">- fix help information is consistent due to the singularity of the class method.</changelog>
</package>
<package pkgid="b7ba1432fe12e54c33119d635970c1337a0d1d0ce7371ed7d4ea453b49988632" name="grpc" arch="src">
  <version epoch="0" ver="1.41.1" rel="6.oe2203sp1"/>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 1.41.1-1" date="1640606400">- Type:requirement
- ID:NA
- SUG:NA
- DESC:update grpc to 1.41.1</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.41.1-2" date="1647950400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete useless so files</changelog>
  <changelog author="xingwei&lt;xingwei14@h-partners.com&gt; - 1.41.1-3" date="1650110400">- Type:enhancement
- ID:NA
- SUG:NA
- DESC: remove gflags</changelog>
  <changelog author="zhouyihang&lt;zhouyihang3@h-partners.com&gt; - 1.41.1-4" date="1666267200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: add some secure compilation options</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1.41.1-5" date="1684497600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix sw_64 build error for hive</changelog>
  <changelog author="zhouyihang&lt;zhouyihang3@h-partners.com&gt; - 1.41.1-6" date="1695124800">- Type:CVE
- ID:CVE-2023-4785
- SUG:NA
- DESC:fix CVE-2023-4785</changelog>
</package>
<package pkgid="defb099e0782ec87a0739b23f89cbb66a2d76c85c9a16ad1125951166c2e8041" name="grub2" arch="src">
  <version epoch="1" ver="2.06" rel="20.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-11" date="1658577600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix compressed kernel verification failed</changelog>
  <changelog author="wanglu &lt;wanglu210@huawei.com&gt; - 1:2.06-12" date="1661860800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:tests: Disable blkid cache usage
       disk/efi/efidisk: Pass buffers with higher alignment</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-13" date="1666526400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport some patches from upstream</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-14" date="1667563200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add the source file of config_for_secure</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-15" date="1668772800">- Type:bugfix
- CVE:CVE-2022-2601 CVE-2022-3775
- SUG:NA
- DESC:fix CVE-2022-2601 and CVE-2022-3775</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-16" date="1670846400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:enable -fPIE compilation options</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-17" date="1671451200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:modify the permissions of the files which under /usr/lib/systemd/system directory
       in grub2-tools to 644</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-18" date="1673352000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add loongarch support</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-19" date="1675339200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disable some unsupported filesystems</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-20" date="1675339201">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch modify the location where initrd is loaded into memory</changelog>
</package>
<package pkgid="df420337536bdc2c7cc7767687e2bb18897f0c65d7c2573ea0c4e0504d961883" name="grub2" arch="src">
  <version epoch="1" ver="2.06" rel="28.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-19" date="1675339200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disable some unsupported filesystems</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-20" date="1675339201">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch modify the location where initrd is loaded into memory</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-21" date="1675684800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disk/diskfilter: Check calloc() result for NULL
       kern/buffer: Handle NULL input pointer in grub_buffer_free()
       disk/diskfilter: Don't make a RAID array with more than 1024 disks
       loader/multiboot_elfxx: Fix memory leak
       loader/linux: Ensure the newc pathname is NULL-terminated
       term/i386/pc/vga_text: Prevent out-of-bounds writes to VGA text buffer
       normal/cmdline: Fix two related integer underflows
       fs/iso9660: Fix memory leaks in grub_iso9660_susp_iterate()
       fs/squash4: Fix memory leaks in grub_squash_iterate_dir()
       fs/xfs: Fix memory leaks in XFS module
       kern/file: Fix error handling in grub_file_open()</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-22" date="1675857600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add EFI frame buffer support</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-23" date="1676289600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add support for v4.0 interface</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-24" date="1678449600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add support for new EFI screen info GUID</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-25" date="1678536000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix missing declaration of strchrnul in rpm-sort</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-26" date="1679140800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Force initrd load address 64KiB alignment</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-27" date="1679486400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Implement cache synchronization operation</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-28" date="1681128000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:osdep/linux/hostdisk: Modify sector by sysfs as disk sector
       net/bootp: Fix unchecked return value
       fs/iso9660: Avoid reading past the entry boundary
       fs/iso9660: Incorrect check for entry boundary
       fs/iso9660: Prevent skipping CE or ST at start of continuation area
       fs/iso9660: Prevent read past the end of system use area
       fs/iso9660: Add check to prevent infinite loop
       gentpl.py: Remove .interp section from .img files
       kern/fs: Fix possible integer overflow in i386-pc mode with large partitions
       font: Reject fonts with negative max_char_width or max_char_height
       font: Assign null_font to unknown_glyph
       font: Check return value of grub_malloc() in ascii_glyph_lookup()</changelog>
</package>
<package pkgid="0396df63b87f1343babf208f3d1cd14980f2f507a29bfcafea65c36b7dcfdc0c" name="grub2" arch="src">
  <version epoch="1" ver="2.06" rel="31.oe2203sp1"/>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-22" date="1675857600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add EFI frame buffer support</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-23" date="1676289600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add support for v4.0 interface</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-24" date="1678449600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add support for new EFI screen info GUID</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-25" date="1678536000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix missing declaration of strchrnul in rpm-sort</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-26" date="1679140800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Force initrd load address 64KiB alignment</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-27" date="1679486400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Implement cache synchronization operation</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-28" date="1681128000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:osdep/linux/hostdisk: Modify sector by sysfs as disk sector
       net/bootp: Fix unchecked return value
       fs/iso9660: Avoid reading past the entry boundary
       fs/iso9660: Incorrect check for entry boundary
       fs/iso9660: Prevent skipping CE or ST at start of continuation area
       fs/iso9660: Prevent read past the end of system use area
       fs/iso9660: Add check to prevent infinite loop
       gentpl.py: Remove .interp section from .img files
       kern/fs: Fix possible integer overflow in i386-pc mode with large partitions
       font: Reject fonts with negative max_char_width or max_char_height
       font: Assign null_font to unknown_glyph
       font: Check return value of grub_malloc() in ascii_glyph_lookup()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-29" date="1682251200">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:Read /etc/default/grub.d/*.cfg after /etc/default/grub</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-30" date="1686830400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Revert "EFI: allocate kernel in EFI_RUNTIME_SERVICES_CODE</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-31" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern/acpi: Use xsdt_addr if present
       commands/acpi: Use xsdt_addrifpresent</changelog>
</package>
<package pkgid="9395b14a0768570787d291d0961446ca22057241fa281d860e767d28bfed29ae" name="grub2" arch="src">
  <version epoch="1" ver="2.06" rel="33.oe2203sp1"/>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-24" date="1678449600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add support for new EFI screen info GUID</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-25" date="1678536000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix missing declaration of strchrnul in rpm-sort</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-26" date="1679140800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Force initrd load address 64KiB alignment</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-27" date="1679486400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Implement cache synchronization operation</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-28" date="1681128000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:osdep/linux/hostdisk: Modify sector by sysfs as disk sector
       net/bootp: Fix unchecked return value
       fs/iso9660: Avoid reading past the entry boundary
       fs/iso9660: Incorrect check for entry boundary
       fs/iso9660: Prevent skipping CE or ST at start of continuation area
       fs/iso9660: Prevent read past the end of system use area
       fs/iso9660: Add check to prevent infinite loop
       gentpl.py: Remove .interp section from .img files
       kern/fs: Fix possible integer overflow in i386-pc mode with large partitions
       font: Reject fonts with negative max_char_width or max_char_height
       font: Assign null_font to unknown_glyph
       font: Check return value of grub_malloc() in ascii_glyph_lookup()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-29" date="1682251200">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:Read /etc/default/grub.d/*.cfg after /etc/default/grub</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-30" date="1686830400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Revert "EFI: allocate kernel in EFI_RUNTIME_SERVICES_CODE</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-31" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern/acpi: Use xsdt_addr if present
       commands/acpi: Use xsdt_addrifpresent</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-32" date="1689595200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Override the linker and force noexecstack stacks</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
</package>
<package pkgid="dcc687c53dc49f6bd7a50046f3a1a68b87b5109789af0892aa53dfcc45e5cb8b" name="grub2" arch="src">
  <version epoch="1" ver="2.06" rel="35.oe2203sp1"/>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-26" date="1679140800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Force initrd load address 64KiB alignment</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-27" date="1679486400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Implement cache synchronization operation</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-28" date="1681128000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:osdep/linux/hostdisk: Modify sector by sysfs as disk sector
       net/bootp: Fix unchecked return value
       fs/iso9660: Avoid reading past the entry boundary
       fs/iso9660: Incorrect check for entry boundary
       fs/iso9660: Prevent skipping CE or ST at start of continuation area
       fs/iso9660: Prevent read past the end of system use area
       fs/iso9660: Add check to prevent infinite loop
       gentpl.py: Remove .interp section from .img files
       kern/fs: Fix possible integer overflow in i386-pc mode with large partitions
       font: Reject fonts with negative max_char_width or max_char_height
       font: Assign null_font to unknown_glyph
       font: Check return value of grub_malloc() in ascii_glyph_lookup()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-29" date="1682251200">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:Read /etc/default/grub.d/*.cfg after /etc/default/grub</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-30" date="1686830400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Revert "EFI: allocate kernel in EFI_RUNTIME_SERVICES_CODE</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-31" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern/acpi: Use xsdt_addr if present
       commands/acpi: Use xsdt_addrifpresent</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-32" date="1689595200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Override the linker and force noexecstack stacks</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.com&gt; - 1:2.06-34" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
</package>
<package pkgid="ed2a6af6e518b571e8d3e60b96ea02307b254f72285b5451d807faa742047e64" name="grub2" arch="src">
  <version epoch="1" ver="2.06" rel="37.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-28" date="1681128000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:osdep/linux/hostdisk: Modify sector by sysfs as disk sector
       net/bootp: Fix unchecked return value
       fs/iso9660: Avoid reading past the entry boundary
       fs/iso9660: Incorrect check for entry boundary
       fs/iso9660: Prevent skipping CE or ST at start of continuation area
       fs/iso9660: Prevent read past the end of system use area
       fs/iso9660: Add check to prevent infinite loop
       gentpl.py: Remove .interp section from .img files
       kern/fs: Fix possible integer overflow in i386-pc mode with large partitions
       font: Reject fonts with negative max_char_width or max_char_height
       font: Assign null_font to unknown_glyph
       font: Check return value of grub_malloc() in ascii_glyph_lookup()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-29" date="1682251200">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:Read /etc/default/grub.d/*.cfg after /etc/default/grub</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-30" date="1686830400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Revert "EFI: allocate kernel in EFI_RUNTIME_SERVICES_CODE</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-31" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern/acpi: Use xsdt_addr if present
       commands/acpi: Use xsdt_addrifpresent</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-32" date="1689595200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Override the linker and force noexecstack stacks</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.com&gt; - 1:2.06-34" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
  <changelog author="ouuleilei &lt;wangliu@iscas.ac.cn&gt; - 1:2.06-36" date="1693569600">add a patch to fix build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-37" date="1694606400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fs/udf: Fix out of bounds access
       lib/relocator: Fix OOB write when initializing lo-&gt;freebytes[]
       util/grub-mount: Fix memory leak in fuse_getattr()</changelog>
</package>
<package pkgid="9a608fd2a071e39e612795b58fa5c0f82eb0e56dc446411748eb933015249ec1" name="grub2" arch="src">
  <version epoch="1" ver="2.06" rel="38.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-29" date="1682251200">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:Read /etc/default/grub.d/*.cfg after /etc/default/grub</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-30" date="1686830400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Revert "EFI: allocate kernel in EFI_RUNTIME_SERVICES_CODE</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-31" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern/acpi: Use xsdt_addr if present
       commands/acpi: Use xsdt_addrifpresent</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-32" date="1689595200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Override the linker and force noexecstack stacks</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.com&gt; - 1:2.06-34" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
  <changelog author="ouuleilei &lt;wangliu@iscas.ac.cn&gt; - 1:2.06-36" date="1693569600">add a patch to fix build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-37" date="1694606400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fs/udf: Fix out of bounds access
       lib/relocator: Fix OOB write when initializing lo-&gt;freebytes[]
       util/grub-mount: Fix memory leak in fuse_getattr()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-38" date="1696680000">- Type:CVE
- CVE:CVE-2023-4692 CVE-2023-4693
- SUG:NA
- DESC:fs/ntfs: Make code more readable
       fs/ntfs: Fix an OOB read when parsing a volume label
       fs/ntfs: Fix an OOB read when parsing bitmaps for index attributes
       fs/ntfs: Fix an OOB read when parsing directory entries from resident and non-resident index attributes
       fs/ntfs: Fix an OOB read when reading data from the resident $DATA attribute
       fs/ntfs: Fix an OOB write when parsing the $ATTRIBUTE_LIST attribute for the $MFT file</changelog>
</package>
<package pkgid="367d80ea0f17fb3118df4750bef4f9d534f5f94be3de0ca2456e82475ba095b3" name="grub2" arch="src">
  <version epoch="1" ver="2.06" rel="40.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-31" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern/acpi: Use xsdt_addr if present
       commands/acpi: Use xsdt_addrifpresent</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-32" date="1689595200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Override the linker and force noexecstack stacks</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.com&gt; - 1:2.06-34" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
  <changelog author="ouuleilei &lt;wangliu@iscas.ac.cn&gt; - 1:2.06-36" date="1693569600">add a patch to fix build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-37" date="1694606400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fs/udf: Fix out of bounds access
       lib/relocator: Fix OOB write when initializing lo-&gt;freebytes[]
       util/grub-mount: Fix memory leak in fuse_getattr()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-38" date="1696680000">- Type:CVE
- CVE:CVE-2023-4692 CVE-2023-4693
- SUG:NA
- DESC:fs/ntfs: Make code more readable
       fs/ntfs: Fix an OOB read when parsing a volume label
       fs/ntfs: Fix an OOB read when parsing bitmaps for index attributes
       fs/ntfs: Fix an OOB read when parsing directory entries from resident and non-resident index attributes
       fs/ntfs: Fix an OOB read when reading data from the resident $DATA attribute
       fs/ntfs: Fix an OOB write when parsing the $ATTRIBUTE_LIST attribute for the $MFT file</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-39" date="1701777600">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:loongarch: Disable relaxation relocations</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-40" date="1705060800">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:add TPCM support with ipmi channel
       change the name of module tpcm to tpcm_kunpeng
       skip verification when not loading grub.cfg</changelog>
</package>
<package pkgid="2a9cd525ad72293240f7a7bb7e8e3a9a5d314c5b614089043bfed969399df742" name="grub2" arch="src">
  <version epoch="1" ver="2.06" rel="41.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-32" date="1689595200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Override the linker and force noexecstack stacks</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.com&gt; - 1:2.06-34" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
  <changelog author="ouuleilei &lt;wangliu@iscas.ac.cn&gt; - 1:2.06-36" date="1693569600">add a patch to fix build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-37" date="1694606400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fs/udf: Fix out of bounds access
       lib/relocator: Fix OOB write when initializing lo-&gt;freebytes[]
       util/grub-mount: Fix memory leak in fuse_getattr()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-38" date="1696680000">- Type:CVE
- CVE:CVE-2023-4692 CVE-2023-4693
- SUG:NA
- DESC:fs/ntfs: Make code more readable
       fs/ntfs: Fix an OOB read when parsing a volume label
       fs/ntfs: Fix an OOB read when parsing bitmaps for index attributes
       fs/ntfs: Fix an OOB read when parsing directory entries from resident and non-resident index attributes
       fs/ntfs: Fix an OOB read when reading data from the resident $DATA attribute
       fs/ntfs: Fix an OOB write when parsing the $ATTRIBUTE_LIST attribute for the $MFT file</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-39" date="1701777600">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:loongarch: Disable relaxation relocations</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-40" date="1705060800">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:add TPCM support with ipmi channel
       change the name of module tpcm to tpcm_kunpeng
       skip verification when not loading grub.cfg</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-41" date="1709294400">- Type:CVE
- CVE:CVE-2024-1048
- SUG:NA
- DESC:grub-set-bootflag: Fix for CVE-2024-1048
       commands/acpi: Fix calculation of ACPI tables addresses when processing RSDT and XSDT
       kern/acpi: Skip NULL entries in RSDT and XSDT
       util/grub-mount: Check file path sanity</changelog>
</package>
<package pkgid="759e921d90f0ed3ff2f2c4ef05d52ade76e8498a5177efd2dfdd14c79e318753" name="grub2" arch="src">
  <version epoch="1" ver="2.06" rel="42.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.com&gt; - 1:2.06-34" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
  <changelog author="ouuleilei &lt;wangliu@iscas.ac.cn&gt; - 1:2.06-36" date="1693569600">add a patch to fix build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-37" date="1694606400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fs/udf: Fix out of bounds access
       lib/relocator: Fix OOB write when initializing lo-&gt;freebytes[]
       util/grub-mount: Fix memory leak in fuse_getattr()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-38" date="1696680000">- Type:CVE
- CVE:CVE-2023-4692 CVE-2023-4693
- SUG:NA
- DESC:fs/ntfs: Make code more readable
       fs/ntfs: Fix an OOB read when parsing a volume label
       fs/ntfs: Fix an OOB read when parsing bitmaps for index attributes
       fs/ntfs: Fix an OOB read when parsing directory entries from resident and non-resident index attributes
       fs/ntfs: Fix an OOB read when reading data from the resident $DATA attribute
       fs/ntfs: Fix an OOB write when parsing the $ATTRIBUTE_LIST attribute for the $MFT file</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-39" date="1701777600">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:loongarch: Disable relaxation relocations</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-40" date="1705060800">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:add TPCM support with ipmi channel
       change the name of module tpcm to tpcm_kunpeng
       skip verification when not loading grub.cfg</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-41" date="1709294400">- Type:CVE
- CVE:CVE-2024-1048
- SUG:NA
- DESC:grub-set-bootflag: Fix for CVE-2024-1048
       commands/acpi: Fix calculation of ACPI tables addresses when processing RSDT and XSDT
       kern/acpi: Skip NULL entries in RSDT and XSDT
       util/grub-mount: Check file path sanity</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-42" date="1717502400">- Type:CVE
- CVE:CVE-2021-46848
- SUG:NA
- DESC:lib/libtasn1: Fix ETYPE_OK off by one array size check</changelog>
</package>
<package pkgid="5f23b41182b352c1edad6b1411f380b1965f9f94cb1c3164ee27c3fab9d45f79" name="grub2" arch="src">
  <version epoch="1" ver="2.06" rel="43.oe2203sp1"/>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.com&gt; - 1:2.06-34" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
  <changelog author="ouuleilei &lt;wangliu@iscas.ac.cn&gt; - 1:2.06-36" date="1693569600">add a patch to fix build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-37" date="1694606400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fs/udf: Fix out of bounds access
       lib/relocator: Fix OOB write when initializing lo-&gt;freebytes[]
       util/grub-mount: Fix memory leak in fuse_getattr()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-38" date="1696680000">- Type:CVE
- CVE:CVE-2023-4692 CVE-2023-4693
- SUG:NA
- DESC:fs/ntfs: Make code more readable
       fs/ntfs: Fix an OOB read when parsing a volume label
       fs/ntfs: Fix an OOB read when parsing bitmaps for index attributes
       fs/ntfs: Fix an OOB read when parsing directory entries from resident and non-resident index attributes
       fs/ntfs: Fix an OOB read when reading data from the resident $DATA attribute
       fs/ntfs: Fix an OOB write when parsing the $ATTRIBUTE_LIST attribute for the $MFT file</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-39" date="1701777600">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:loongarch: Disable relaxation relocations</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-40" date="1705060800">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:add TPCM support with ipmi channel
       change the name of module tpcm to tpcm_kunpeng
       skip verification when not loading grub.cfg</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-41" date="1709294400">- Type:CVE
- CVE:CVE-2024-1048
- SUG:NA
- DESC:grub-set-bootflag: Fix for CVE-2024-1048
       commands/acpi: Fix calculation of ACPI tables addresses when processing RSDT and XSDT
       kern/acpi: Skip NULL entries in RSDT and XSDT
       util/grub-mount: Check file path sanity</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-42" date="1717502400">- Type:CVE
- CVE:CVE-2021-46848
- SUG:NA
- DESC:lib/libtasn1: Fix ETYPE_OK off by one array size check</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-43" date="1718712000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix log printing in tpcm_kunpeng moddule
       osdep/linux/hostdisk: Use stat() instead of udevadm for partition lookup
       osdep: Introduce include/grub/osdep/major.h and use it
       disk/mdraid1x_linux: Prevent infinite recursion
       disk: Generalize MD_MAX_DISKS to GRUB_MDRAID_MAX_DISKS</changelog>
</package>
<package pkgid="dd818cc6f5924eb8ab2c76dab2ad3017fa5a44cd6ea7c679bed09fec78653bde" name="grub2" arch="src">
  <version epoch="1" ver="2.06" rel="44.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
  <changelog author="ouuleilei &lt;wangliu@iscas.ac.cn&gt; - 1:2.06-36" date="1693569600">add a patch to fix build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-37" date="1694606400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fs/udf: Fix out of bounds access
       lib/relocator: Fix OOB write when initializing lo-&gt;freebytes[]
       util/grub-mount: Fix memory leak in fuse_getattr()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-38" date="1696680000">- Type:CVE
- CVE:CVE-2023-4692 CVE-2023-4693
- SUG:NA
- DESC:fs/ntfs: Make code more readable
       fs/ntfs: Fix an OOB read when parsing a volume label
       fs/ntfs: Fix an OOB read when parsing bitmaps for index attributes
       fs/ntfs: Fix an OOB read when parsing directory entries from resident and non-resident index attributes
       fs/ntfs: Fix an OOB read when reading data from the resident $DATA attribute
       fs/ntfs: Fix an OOB write when parsing the $ATTRIBUTE_LIST attribute for the $MFT file</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-39" date="1701777600">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:loongarch: Disable relaxation relocations</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-40" date="1705060800">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:add TPCM support with ipmi channel
       change the name of module tpcm to tpcm_kunpeng
       skip verification when not loading grub.cfg</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-41" date="1709294400">- Type:CVE
- CVE:CVE-2024-1048
- SUG:NA
- DESC:grub-set-bootflag: Fix for CVE-2024-1048
       commands/acpi: Fix calculation of ACPI tables addresses when processing RSDT and XSDT
       kern/acpi: Skip NULL entries in RSDT and XSDT
       util/grub-mount: Check file path sanity</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-42" date="1717502400">- Type:CVE
- CVE:CVE-2021-46848
- SUG:NA
- DESC:lib/libtasn1: Fix ETYPE_OK off by one array size check</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-43" date="1718712000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix log printing in tpcm_kunpeng moddule
       osdep/linux/hostdisk: Use stat() instead of udevadm for partition lookup
       osdep: Introduce include/grub/osdep/major.h and use it
       disk/mdraid1x_linux: Prevent infinite recursion
       disk: Generalize MD_MAX_DISKS to GRUB_MDRAID_MAX_DISKS</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-44" date="1719230400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix log printing in tpcm_kunpeng moddule again</changelog>
</package>
<package pkgid="57eafa5d6428a2473d1dce26776dd3fed81898fcb84d0801a0ffe4f5dc4ffcba" name="gssntlmssp" arch="src">
  <version epoch="0" ver="0.7.0" rel="10.oe2203sp1"/>
  <changelog author="xu_ping &lt;xuping33@h-partners.com&gt; - 0.7.0-9" date="1669032000">- DESC:Modify invalid source</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 0.7.0-10" date="1676980800">- Fix CVE-2023-25563,CVE-2023-25564,CVE-2023-25565 and CVE-2023-25567</changelog>
</package>
<package pkgid="69a662ba2dc0d75af29e5cd6bf06a0b6b96ad316667135e6d01d4ff5c7bf86b9" name="gssproxy" arch="src">
  <version epoch="0" ver="0.9.1" rel="2.oe2203sp1"/>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 0.8.4-1" date="1638273600">- update to 0.8.4</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 0.8.4-2" date="1666094400">- typo doc fix</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 0.9.1-1" date="1666612800">- update to 0.9.1</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 0.9.1-2" date="1681128000">- add BuildRequires:systemd-devel for option idle-timeout</changelog>
</package>
<package pkgid="e79e877187f1e2778630f661c559e021d5449cbf69c79f8d0ff0cdfcc86b67a4" name="gssproxy" arch="src">
  <version epoch="0" ver="0.9.1" rel="3.oe2203sp1"/>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 0.8.4-2" date="1666094400">- typo doc fix</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 0.9.1-1" date="1666612800">- update to 0.9.1</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 0.9.1-2" date="1681128000">- add BuildRequires:systemd-devel for option idle-timeout</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 0.9.1-3" date="1711540800">- backport upstream patch to remove node from correct list</changelog>
</package>
<package pkgid="6c344192b804f097b964fb61c1ff9338c04ae9e9c8222f30c0b05e029f788332" name="gstreamer1-plugins-bad-free" arch="src">
  <version epoch="0" ver="1.16.2" rel="6.oe2203sp1"/>
  <changelog author="pei-jiankang&lt;peijiankang@kylinos.com&gt; - 1.16.2-5" date="1642161600">- modify complie error</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1.16.2-6" date="1696680000">- Fix CVE-2023-40474,CVE-2023-40475 and CVE-2023-40476</changelog>
</package>
<package pkgid="134ae0e40a51a9255c16f6baac58b54432ab631c2686e35224854d8d687bcf4c" name="gstreamer1-plugins-bad-free" arch="src">
  <version epoch="0" ver="1.16.2" rel="9.oe2203sp1"/>
  <changelog author="pei-jiankang&lt;peijiankang@kylinos.com&gt; - 1.16.2-5" date="1642161600">- modify complie error</changelog>
  <changelog author="houyingchao &lt;houiyngchao@h-partners.com&gt; - 1.16.2-6" date="1655208000">- Fix compilation failed</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1.16.2-7" date="1696680000">- Fix CVE-2023-40474,CVE-2023-40475 and CVE-2023-40476</changelog>
  <changelog author="douyan &lt;douyan@kylinos.cn&gt; - 1.16.2-8" date="1702123200">- modify compilation failed about libgstwaylandsink.so</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.16.2-9" date="1702641600">- Fix CVE-2023-44446,CVE-2023-37329</changelog>
</package>
<package pkgid="20c86ad9fbd2d097576fcf1ffb8eace1b1883f91f46cea89e2fb3bbc1ddd7951" name="gstreamer1-plugins-base" arch="src">
  <version epoch="0" ver="1.18.4" rel="4.oe2203sp1"/>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 1.18.4-4" date="1706702400">- Delete unnecessary files</changelog>
</package>
<package pkgid="289e4eb8389c0610ac179eeb482cefca0881dd83f61b22e2a4485ea7d8406040" name="gstreamer1-plugins-base" arch="src">
  <version epoch="0" ver="1.18.4" rel="6.oe2203sp1"/>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 1.18.4-4" date="1706702400">- Delete unnecessary files</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@kylinsec.com.cn&gt; - 1.18.4-5" date="1707048000">- Add build sw_64 support</changelog>
  <changelog author="technology208 &lt;technology@208suo.com&gt; - 1.18.4-6" date="1710504000">- fix CVE-2023-37328</changelog>
</package>
<package pkgid="1e7823e9bbfa1cc1c7065f66e1225557c397a0f560188f74373172446b13be2a" name="gstreamer1-plugins-base" arch="src">
  <version epoch="0" ver="1.18.4" rel="7.oe2203sp1"/>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 1.18.4-4" date="1706702400">- Delete unnecessary files</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@kylinsec.com.cn&gt; - 1.18.4-5" date="1707048000">- Add build sw_64 support</changelog>
  <changelog author="technology208 &lt;technology@208suo.com&gt; - 1.18.4-6" date="1710504000">- fix CVE-2023-37328</changelog>
  <changelog author="technology208 &lt;technology@208suo.com&gt; - 1.18.4-7" date="1716206400">- optimize subparse end_tag process</changelog>
</package>
<package pkgid="31f02a39941fa32361492594e3d0a31826d2130714195e4464350d00aeeae58d" name="gstreamer1-plugins-good" arch="src">
  <version epoch="0" ver="1.16.2" rel="6.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1.16.2-5" date="1656331200">- Fix CVE-2022-2122 CVE-2022-1920-to-CVE-2022-1925</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.16.2-6" date="1702641600">- Fix CVE-2023-37327</changelog>
</package>
<package pkgid="dc88572c82c0d0286d38f50f865d1bc0611938086f84e7e467799655f00111b5" name="gtest" arch="src">
  <version epoch="0" ver="1.8.1" rel="5.oe2203sp1"/>
  <changelog author="xingxing&lt;xingxing@xfusion.com&gt; - 1.8.1-4" date="1674043200">- Internal Change</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1.8.1-5" date="1720699200">- cmake modules in gtest-devel needs libgmock.so.*</changelog>
</package>
<package pkgid="642e46fbd0e47736de0a1a97f1c2221a4e3d5530e3544192383b16b9a246a950" name="gtk2" arch="src">
  <version epoch="0" ver="2.24.33" rel="9.oe2203sp1"/>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.24.33-7" date="1705406400">- delete taboo words</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.24.33-8" date="1705579200">- revert last commit</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.24.33-9" date="1721044800">- fix CVE-2024-6655: Library injection from CWD</changelog>
</package>
<package pkgid="2484288e151e96153aa2e520c3dd6cd773998d6ca5458c3c1944f07a8411a954" name="gtk3" arch="src">
  <version epoch="0" ver="3.24.30" rel="11.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 3.24.30-6" date="1666785600">- Rebuild for next release</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 3.24.30-7" date="1686830400">- delete taboo words</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@kylinsec.com.cn&gt; - 3.24.30-8" date="1692619200">- Fix the problem that the prompt information of network icon volume icon is not displayed
- update xscreen size when x11 screen size change
- always send the monitors changed signal when screen size change
- Add function definition of gtk_image_set_from_pixbuf_with_scale</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@kylinsec.com.cn&gt; - 3.24.30-9" date="1705406400">- revert last commit not issue patch file</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 3.24.30-10" date="1705579200">- revert delete taboo words commit</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 3.24.30-11" date="1720699200">- Fix CVE-2024-6655: Library injection from CWD</changelog>
</package>
<package pkgid="773e34e0782debc0971f6686513fc791a781758c13ac70fb53af69e5943c2893" name="guava" arch="src">
  <version epoch="0" ver="25.0" rel="6.oe2203sp1"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 25.0-6" date="1688472000">- Fix CVE-2023-2976</changelog>
</package>
<package pkgid="f09b0031155b7a3564c1f79618edc1bcd6a52491914f1c1e9fccc930eba6609c" name="guava20" arch="src">
  <version epoch="0" ver="20.0" rel="11.oe2203sp1"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 20.0-11" date="1688472000">- Fix CVE-2023-2976</changelog>
</package>
<package pkgid="36a9bcc9c5c395047cccf7560c4dd3737d90a4300fb96aa0bb6e2377babe71f8" name="haproxy" arch="src">
  <version epoch="0" ver="2.6.6" rel="11.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 2.6.6-2" date="1677326400">- Fix CVE-2023-25725 and CVE-2023-0056</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.6.6-3" date="1681992000">- Fix CVE-2023-25950</changelog>
  <changelog author="wangkai &lt;wang_kai001@hoperun.com&gt; - 2.6.6-4" date="1692619200">- Fix CVE-2023-40225</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 2.6.6-5" date="1692964800">- fix sw_64 build error</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-6" date="1695816000">- Type:bugfix
- CVE:NA
- SUG:restart
- DESC:connection: Clear flags when a conn is removed
       connection: Preserve flags when a conn is removed
       stream: do not try to free a failed stream-conn
       http_ana/txn: don't re-initialize txn and req var
       mworker: prevent incorrect values in uptime
       protocol: fix minor memory leak in protocol_bind_all()
       stream: Perform errors handling in right order in stream_new()</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.6.6-7" date="1701432000">- Fix CVE-2023-0836</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.6.6-8" date="1701864000">- Fix CVE-2023-45539</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-9" date="1705665600">- Type:bugfix
- CVE:NA
- SUG:restart
- DESC:backport to fix potential coredump:
       errors: handle malloc failure in usermsgs_put
       ssl_sock: add check for ha_meth
       thread: add a check for pthread_creat</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-10" date="1710158400">- Type:bugfix
- CVE:NA
- SUG:restart
- DESC:server: add missing free for server-&gt;rdr_pfx
       server: do not leak default-server in defaults</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-11" date="1719230400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:server: 'source' interface ignored from 'default-server' directive</changelog>
</package>
<package pkgid="1cea1f40baf892f36915ecda1fe12f7a7535adc1f35ab72964ae8084ccf70f3a" name="haproxy" arch="src">
  <version epoch="0" ver="2.6.6" rel="2.oe2203sp1"/>
  <changelog author="huanghaitao &lt;huanghaitao8@huawei.com&gt; - 2.2.1-1" date="1625140800">- update to 2.2.1</changelog>
  <changelog author="liwu &lt;liwu13@huawei.com&gt; - 2.2.1-2" date="1629979200">- fix CVE-2021-39241,CVE-2021-39242</changelog>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 2.2.16-1" date="1630324800">- Upgrade 2.2.16 to fix CVE-2021-39240</changelog>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 2.2.16-2" date="1631966400">- Fix CVE-2021-40346</changelog>
  <changelog author="yanglu &lt;yanglu72@huawei.com&gt; - 2.4.8-1" date="1638878400">- update haproxy to 2.4.8</changelog>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 2.4.8-2" date="1647000000">- Fix CVE-2022-0711</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-1" date="1666440000">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:upgrade to 2.6.6</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 2.6.6-2" date="1677326400">- Fix CVE-2023-25725 and CVE-2023-0056</changelog>
</package>
<package pkgid="04f22c6f6c184fc2e12bcbc7b751bdfc06817483d6c9042459841fc7e726b708" name="haproxy" arch="src">
  <version epoch="0" ver="2.6.6" rel="3.oe2203sp1"/>
  <changelog author="huanghaitao &lt;huanghaitao8@huawei.com&gt; - 2.2.1-1" date="1625140800">- update to 2.2.1</changelog>
  <changelog author="liwu &lt;liwu13@huawei.com&gt; - 2.2.1-2" date="1629979200">- fix CVE-2021-39241,CVE-2021-39242</changelog>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 2.2.16-1" date="1630324800">- Upgrade 2.2.16 to fix CVE-2021-39240</changelog>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 2.2.16-2" date="1631966400">- Fix CVE-2021-40346</changelog>
  <changelog author="yanglu &lt;yanglu72@huawei.com&gt; - 2.4.8-1" date="1638878400">- update haproxy to 2.4.8</changelog>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 2.4.8-2" date="1647000000">- Fix CVE-2022-0711</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-1" date="1666440000">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:upgrade to 2.6.6</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 2.6.6-2" date="1677326400">- Fix CVE-2023-25725 and CVE-2023-0056</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.6.6-3" date="1681992000">- Fix CVE-2023-25950</changelog>
</package>
<package pkgid="8410e602edca6b1243abc918f118565e64ab5c321c00e693744446e20485b289" name="haproxy" arch="src">
  <version epoch="0" ver="2.6.6" rel="4.oe2203sp1"/>
  <changelog author="liwu &lt;liwu13@huawei.com&gt; - 2.2.1-2" date="1629979200">- fix CVE-2021-39241,CVE-2021-39242</changelog>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 2.2.16-1" date="1630324800">- Upgrade 2.2.16 to fix CVE-2021-39240</changelog>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 2.2.16-2" date="1631966400">- Fix CVE-2021-40346</changelog>
  <changelog author="yanglu &lt;yanglu72@huawei.com&gt; - 2.4.8-1" date="1638878400">- update haproxy to 2.4.8</changelog>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 2.4.8-2" date="1647000000">- Fix CVE-2022-0711</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-1" date="1666440000">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:upgrade to 2.6.6</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 2.6.6-2" date="1677326400">- Fix CVE-2023-25725 and CVE-2023-0056</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.6.6-3" date="1681992000">- Fix CVE-2023-25950</changelog>
  <changelog author="wangkai &lt;wang_kai001@hoperun.com&gt; - 2.6.6-4" date="1692619200">- Fix CVE-2023-40225</changelog>
</package>
<package pkgid="ac6014654a54ef315b695d2aa6d459da084eb5f71f2829c0a60537c6f8eb907b" name="haproxy" arch="src">
  <version epoch="0" ver="2.6.6" rel="8.oe2203sp1"/>
  <changelog author="yanglu &lt;yanglu72@huawei.com&gt; - 2.4.8-1" date="1638878400">- update haproxy to 2.4.8</changelog>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 2.4.8-2" date="1647000000">- Fix CVE-2022-0711</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-1" date="1666440000">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:upgrade to 2.6.6</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 2.6.6-2" date="1677326400">- Fix CVE-2023-25725 and CVE-2023-0056</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.6.6-3" date="1681992000">- Fix CVE-2023-25950</changelog>
  <changelog author="wangkai &lt;wang_kai001@hoperun.com&gt; - 2.6.6-4" date="1692619200">- Fix CVE-2023-40225</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 2.6.6-5" date="1692964800">- fix sw_64 build error</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-6" date="1695816000">- Type:bugfix
- CVE:NA
- SUG:restart
- DESC:connection: Clear flags when a conn is removed
       connection: Preserve flags when a conn is removed
       stream: do not try to free a failed stream-conn
       http_ana/txn: don't re-initialize txn and req var
       mworker: prevent incorrect values in uptime
       protocol: fix minor memory leak in protocol_bind_all()
       stream: Perform errors handling in right order in stream_new()</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.6.6-7" date="1701432000">- Fix CVE-2023-0836</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.6.6-8" date="1701864000">- Fix CVE-2023-45539</changelog>
</package>
<package pkgid="264538d90552f446a86f6c88b251a102c6177adc7527ee06682d4cc154a79df1" name="haproxy" arch="src">
  <version epoch="0" ver="2.6.6" rel="9.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 2.4.8-2" date="1647000000">- Fix CVE-2022-0711</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-1" date="1666440000">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:upgrade to 2.6.6</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 2.6.6-2" date="1677326400">- Fix CVE-2023-25725 and CVE-2023-0056</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.6.6-3" date="1681992000">- Fix CVE-2023-25950</changelog>
  <changelog author="wangkai &lt;wang_kai001@hoperun.com&gt; - 2.6.6-4" date="1692619200">- Fix CVE-2023-40225</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 2.6.6-5" date="1692964800">- fix sw_64 build error</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-6" date="1695816000">- Type:bugfix
- CVE:NA
- SUG:restart
- DESC:connection: Clear flags when a conn is removed
       connection: Preserve flags when a conn is removed
       stream: do not try to free a failed stream-conn
       http_ana/txn: don't re-initialize txn and req var
       mworker: prevent incorrect values in uptime
       protocol: fix minor memory leak in protocol_bind_all()
       stream: Perform errors handling in right order in stream_new()</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.6.6-7" date="1701432000">- Fix CVE-2023-0836</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.6.6-8" date="1701864000">- Fix CVE-2023-45539</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-9" date="1705665600">- Type:bugfix
- CVE:NA
- SUG:restart
- DESC:backport to fix potential coredump:
       errors: handle malloc failure in usermsgs_put
       ssl_sock: add check for ha_meth
       thread: add a check for pthread_creat</changelog>
</package>
<package pkgid="3cff5027bfcd8edb03fd660cd68a9f49609fe9d80fbf0e5a8b844bbc2345d6b3" name="harfbuzz" arch="src">
  <version epoch="0" ver="2.8.2" rel="4.oe2203sp1"/>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 2.8.1-1" date="1624622400">- update to 2.8.1</changelog>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 2.8.1-2" date="1625486400">- enable make check</changelog>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 2.8.2-1" date="1638532800">- update to harfbuzz-2.8.2-1</changelog>
  <changelog author="loong_C &lt;loong_c@yeah.net&gt; - 2.8.2-2" date="1653393600">- fix spec changelog date</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 2.8.2-3" date="1657800000">- fix CVE-2022-33068</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 2.8.2-4" date="1676462400">- fix CVE-2023-25193</changelog>
</package>
<package pkgid="820c8b1e4410afb4c71d75436024be68d6c5b57bfaea71733b80cfb04cc3f715" name="hdf5" arch="src">
  <version epoch="0" ver="1.12.1" rel="4.oe2203sp1"/>
  <changelog author="liushaofei &lt;liushaofei5@huawei.com&gt; - 1.8.20-13" date="1627905600">- fix incorrect arguments format</changelog>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 1.8.20-14" date="1631275200">- fix rpath error</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partner.com&gt; - 1.8.20-15" date="1652184000">- License compliance rectification</changelog>
  <changelog author="wulei &lt;wulei80@h-partners.com&gt; - 1.12.1-1" date="1655985600">- Upgrade to 1.12.1</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1.12.1-2" date="1680004800">- Fix CVE-2018-13867,CVE-2018-14031,CVE-2018-16438,CVE-2019-8396,CVE-2020-10812 and CVE-2021-37501</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 1.12.1-3" date="1681128000">- fix some commands failed</changelog>
  <changelog author="liyanan &lt;thistleslyn@163.com&gt; - 1.12.1-4" date="1681214400">- Preserve the rpath of the hdf5-openmpi and hdf5-mpich subpackages</changelog>
</package>
<package pkgid="f82a1d50cf12fb2342571f3881b8098b5dd25f92d0cfb89d40769fb97af100fc" name="hdf5" arch="src">
  <version epoch="0" ver="1.12.1" rel="6.oe2203sp1"/>
  <changelog author="Ge Wang &lt;wangge20@h-partner.com&gt; - 1.8.20-15" date="1652184000">- License compliance rectification</changelog>
  <changelog author="wulei &lt;wulei80@h-partners.com&gt; - 1.12.1-1" date="1655985600">- Upgrade to 1.12.1</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1.12.1-2" date="1680004800">- Fix CVE-2018-13867,CVE-2018-14031,CVE-2018-16438,CVE-2019-8396,CVE-2020-10812 and CVE-2021-37501</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 1.12.1-3" date="1681128000">- fix some commands failed</changelog>
  <changelog author="liyanan &lt;thistleslyn@163.com&gt; - 1.12.1-4" date="1681214400">- Preserve the rpath of the hdf5-openmpi and hdf5-mpich subpackages</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 1.12.1-5" date="1693483200">- Add BuildRequires environment-modules</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.12.1-6" date="1703073600">- Add disable-hltools flag to fix CVE-2018-17433, CVE-2018-17436, CVE-2020-10809</changelog>
</package>
<package pkgid="0ed2f7ebe89743e602ef57e1fd470416932c9f944ba6d863efe35e72ff539522" name="hikptool" arch="src">
  <version epoch="0" ver="1.0.0" rel="7.oe2203sp1"/>
  <changelog author="veega2022 &lt;zhuweijia@huawei.com&gt; 1.0.0-1" date="1665576000">- First Spec Version Include hikptool Code</changelog>
  <changelog author="veega2022 &lt;zhuweijia@huawei.com&gt; 1.0.0-2" date="1666785600">- Add roce/roh/cxl/serdes/socip/pcie features source code</changelog>
  <changelog author="veega2022 &lt;zhuweijia@huawei.com&gt; 1.0.0-3" date="1666958400">- Add sas/sata features source code</changelog>
  <changelog author="veega2022 &lt;zhuweijia@huawei.com&gt; 1.0.0-4" date="1668600000">- change the hikptool permission to 4550</changelog>
  <changelog author="veega2022 &lt;zhuweijia@huawei.com&gt; 1.0.0-5" date="1669291200">- Add nic_ppp dump mac and vlan function and change the hikptool permission to 0500</changelog>
  <changelog author="veega2022 &lt;zhuweijia@huawei.com&gt; 1.0.0-6" date="1670846400">- Add socip patch for fix return -EINVAL when the parameter check fails</changelog>
  <changelog author="veega2022 &lt;zhuweijia@huawei.com&gt; 1.0.0-7" date="1670932800">- fix compiler security option problem</changelog>
</package>
<package pkgid="0bb8d216567b0ad033a981a3fec6e6b3f42f9e48ae1fc60b59832c2341c692d3" name="hsqldb" arch="src">
  <version epoch="1" ver="2.4.0" rel="5.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:2.4.0-4" date="1669204800">- Modify invalid Source</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1:2.4.0-5" date="1701950400">- Fix CVE-2022-41853</changelog>
</package>
<package pkgid="a4b92981fab3001a15ccb7e0210c4c2e74f78a7787bae1fadd5b1115a17c4021" name="hsqldb1" arch="src">
  <version epoch="0" ver="1.8.1.3" rel="3.oe2203sp1"/>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 1.8.1.3-2" date="1652097600">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.8.1.3-3" date="1702468800">- Fix CVE-2022-41853</changelog>
</package>
<package pkgid="bd31470ea1d4a11631ae6fba7bf198c77524e5672bc5fa9384f4a315922e40f1" name="htop" arch="src">
  <version epoch="0" ver="3.1.2" rel="2.oe2203sp1"/>
  <changelog author="SimpleUpdate Robot &lt;tc@openeuler.org&gt; - 3.1.2-1" date="1642593600">- Upgrade to version 3.1.2</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 3.1.2-2" date="1701172800">- Backport upstream patches to fix htop crash in container</changelog>
</package>
<package pkgid="65dedb479d531a508a48040f86fe852cdc0170408848533e42eef6bce4a56ab4" name="httpd" arch="src">
  <version epoch="0" ver="2.4.51" rel="13.oe2203sp1"/>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 2.4.51-4" date="1647518400">- Type:cves
- ID:NA
- SUG:restart
- DESC:fix CVE-2022-22719 CVE-2022-22720 CVE-2022-22721 CVE-2022-23934</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 2.4.51-5" date="1647604800">- Type:cves
- ID:NA
- SUG:restart
- DESC:fix CVE-2021-44790 CVE-2021-44224</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-6" date="1653912000">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:switch from PCRE to PCRE2</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-7" date="1655467200">- Type:CVE
- ID:NA
- SUG:restart
- DESC:fix CVE-2022-28615</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-8" date="1655553600">- Type:CVE
- ID:NA
- SUG:restart
- DESC:fix CVE-2022-31813,CVE-2022-28614,CVE-2022-29404,CVE-2022-26377,CVE-2022-30522,CVE-2022-30556</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaweic.om&gt; - 2.4.51-9" date="1658318400">- Type:CVE
- ID:CVE-2022-28330
- SUG:restart
- DESC:fix CVE-2022-28330</changelog>
  <changelog author="liweiganga &lt;liweiganga@uniontech.com&gt; - 2.4.51-10" date="1670846400">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:change default value of HeartbeatMaxServers
       fix setting and comparison of IPs fileds
       avoid voerflow in case of indecently large session
       make ap_escape_quotes() work correctly
       fix lua_request with cast first
       Handle children killed pathologically
       mod_md do not interfere with requests if challenge type http-01</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-11" date="1671019200">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:fix the name of the CVE patch</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-12" date="1671624000">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:reduce the dependency of httpd on system-logos installation</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-13" date="1675339200">- Type:CVE
- ID:CVE-2022-36760, CVE-2006-20001, CVE-2022-37436
- SUG:restart
- DESC:fix CVE-2022-36760,CVE-2006-20001,CVE-2022-37436</changelog>
</package>
<package pkgid="dc6da3486ec1658ac9e74c0fe6b8ead3ee552790a0ffefd4dde0707ce335e5e2" name="httpd" arch="src">
  <version epoch="0" ver="2.4.51" rel="15.oe2203sp1"/>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-6" date="1653912000">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:switch from PCRE to PCRE2</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-7" date="1655467200">- Type:CVE
- ID:NA
- SUG:restart
- DESC:fix CVE-2022-28615</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-8" date="1655553600">- Type:CVE
- ID:NA
- SUG:restart
- DESC:fix CVE-2022-31813,CVE-2022-28614,CVE-2022-29404,CVE-2022-26377,CVE-2022-30522,CVE-2022-30556</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaweic.om&gt; - 2.4.51-9" date="1658318400">- Type:CVE
- ID:CVE-2022-28330
- SUG:restart
- DESC:fix CVE-2022-28330</changelog>
  <changelog author="liweiganga &lt;liweiganga@uniontech.com&gt; - 2.4.51-10" date="1670846400">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:change default value of HeartbeatMaxServers
       fix setting and comparison of IPs fileds
       avoid voerflow in case of indecently large session
       make ap_escape_quotes() work correctly
       fix lua_request with cast first
       Handle children killed pathologically
       mod_md do not interfere with requests if challenge type http-01</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-11" date="1671019200">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:fix the name of the CVE patch</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-12" date="1671624000">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:reduce the dependency of httpd on system-logos installation</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-13" date="1675339200">- Type:CVE
- ID:CVE-2022-36760, CVE-2006-20001, CVE-2022-37436
- SUG:restart
- DESC:fix CVE-2022-36760,CVE-2006-20001,CVE-2022-37436</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-14" date="1678363200">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:mod_dav:open the lock database read-only when possible</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-15" date="1678363201">- Type:CVE
- ID:CVE-2023-27522, CVE-2023-25690
- SUG:restart
- DESC:fix CVE-2023-27522, CVE-2023-25690</changelog>
</package>
<package pkgid="a4d9153433aeac3332ffdbd5b7b1d144f8a03b094b3a14a7af6ead35952fd707" name="httpd" arch="src">
  <version epoch="0" ver="2.4.51" rel="20.oe2203sp1"/>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-11" date="1671019200">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:fix the name of the CVE patch</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-12" date="1671624000">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:reduce the dependency of httpd on system-logos installation</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-13" date="1675339200">- Type:CVE
- ID:CVE-2022-36760, CVE-2006-20001, CVE-2022-37436
- SUG:restart
- DESC:fix CVE-2022-36760,CVE-2006-20001,CVE-2022-37436</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-14" date="1678363200">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:mod_dav:open the lock database read-only when possible</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-15" date="1678363201">- Type:CVE
- ID:CVE-2023-27522, CVE-2023-25690
- SUG:restart
- DESC:fix CVE-2023-27522, CVE-2023-25690</changelog>
  <changelog author="chengyechun &lt;chengyehcun1@huawei.com&gt; - 2.4.51-16" date="1681387200">- Type:bugfix
- ID:
- SUG:restart
- DESC:Report an error if the AJP backend sends an invalid number of headers
       handled a negative value when parsing the config
       avoid delimiting the query with a backreference
       fix missing APLOGNO</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-17" date="1684929600">- Type:bugfix
- ID:
- SUG:restart
- DESC:Fix double encoding of the uri-path of the request
       Do not match the extention against possible query string
       Do not double encode slashes
       Check before forwarding that a nocanon path has not been rewriteen</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 2.4.51-18" date="1691582400">- Type:bugfix
- ID:
- SUG:NA
- DESC:add sw_64 support,optimize sw build patch,add loongarch64 support</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-19" date="1699012800">- Type:CVE
- ID:CVE-2023-31122
- SUG:NA
- DESC:fix CVE-2023-31122</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-20" date="1699012801">- Type:CVE
- ID:CVE-2023-45802
- SUG:NA
- DESC:fix CVE-2023-45802</changelog>
</package>
<package pkgid="63eab551bf722c2a37363f929efb807d2f625dc548a69cb7843bb4bf1da0bd10" name="httpd" arch="src">
  <version epoch="0" ver="2.4.51" rel="21.oe2203sp1"/>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-12" date="1671624000">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:reduce the dependency of httpd on system-logos installation</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-13" date="1675339200">- Type:CVE
- ID:CVE-2022-36760, CVE-2006-20001, CVE-2022-37436
- SUG:restart
- DESC:fix CVE-2022-36760,CVE-2006-20001,CVE-2022-37436</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-14" date="1678363200">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:mod_dav:open the lock database read-only when possible</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-15" date="1678363201">- Type:CVE
- ID:CVE-2023-27522, CVE-2023-25690
- SUG:restart
- DESC:fix CVE-2023-27522, CVE-2023-25690</changelog>
  <changelog author="chengyechun &lt;chengyehcun1@huawei.com&gt; - 2.4.51-16" date="1681387200">- Type:bugfix
- ID:
- SUG:restart
- DESC:Report an error if the AJP backend sends an invalid number of headers
       handled a negative value when parsing the config
       avoid delimiting the query with a backreference
       fix missing APLOGNO</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-17" date="1684929600">- Type:bugfix
- ID:
- SUG:restart
- DESC:Fix double encoding of the uri-path of the request
       Do not match the extention against possible query string
       Do not double encode slashes
       Check before forwarding that a nocanon path has not been rewriteen</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 2.4.51-18" date="1691582400">- Type:bugfix
- ID:
- SUG:NA
- DESC:add sw_64 support,optimize sw build patch,add loongarch64 support</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-19" date="1699012800">- Type:CVE
- ID:CVE-2023-31122
- SUG:NA
- DESC:fix CVE-2023-31122</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-20" date="1699012801">- Type:CVE
- ID:CVE-2023-45802
- SUG:NA
- DESC:fix CVE-2023-45802</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaiwe.com&gt; - 2.4.51-21" date="1715083200">- Type:CVE
- ID:CVE-2024-24795,CVE-2023-38709,CVE-2024-27316
- SUG:NA
- DESC:fix CVE-2024-24795,CVE-2023-38709,CVE-2024-27316 and sync some patches from upstream</changelog>
</package>
<package pkgid="6958f1d0a7aa03bb39f7f8593ee1c72f2050e41713604775ceecfb47536d78e4" name="httpd" arch="src">
  <version epoch="0" ver="2.4.51" rel="22.oe2203sp1"/>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-13" date="1675339200">- Type:CVE
- ID:CVE-2022-36760, CVE-2006-20001, CVE-2022-37436
- SUG:restart
- DESC:fix CVE-2022-36760,CVE-2006-20001,CVE-2022-37436</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-14" date="1678363200">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:mod_dav:open the lock database read-only when possible</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-15" date="1678363201">- Type:CVE
- ID:CVE-2023-27522, CVE-2023-25690
- SUG:restart
- DESC:fix CVE-2023-27522, CVE-2023-25690</changelog>
  <changelog author="chengyechun &lt;chengyehcun1@huawei.com&gt; - 2.4.51-16" date="1681387200">- Type:bugfix
- ID:
- SUG:restart
- DESC:Report an error if the AJP backend sends an invalid number of headers
       handled a negative value when parsing the config
       avoid delimiting the query with a backreference
       fix missing APLOGNO</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-17" date="1684929600">- Type:bugfix
- ID:
- SUG:restart
- DESC:Fix double encoding of the uri-path of the request
       Do not match the extention against possible query string
       Do not double encode slashes
       Check before forwarding that a nocanon path has not been rewriteen</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 2.4.51-18" date="1691582400">- Type:bugfix
- ID:
- SUG:NA
- DESC:add sw_64 support,optimize sw build patch,add loongarch64 support</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-19" date="1699012800">- Type:CVE
- ID:CVE-2023-31122
- SUG:NA
- DESC:fix CVE-2023-31122</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-20" date="1699012801">- Type:CVE
- ID:CVE-2023-45802
- SUG:NA
- DESC:fix CVE-2023-45802</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-21" date="1715083200">- Type:CVE
- ID:CVE-2024-24795,CVE-2023-38709,CVE-2024-27316
- SUG:NA
- DESC:fix CVE-2024-24795,CVE-2023-38709,CVE-2024-27316 and sync some patches from upstream</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-22" date="1720267200">- Type:CVE
- ID:CVE-2024-38473,CVE-2024-38474,CVE-2024-38475,CVE-2024-38476,CVE-2024-38477,CVE-2024-39884,CVE-2024-39573
- SUG:NA
- DSEC:fix some CVEs</changelog>
</package>
<package pkgid="abb623246b17d58c090eafa9d07a70d9e855a97379293c4cb278a69ec431c4a1" name="hwloc" arch="src">
  <version epoch="0" ver="2.7.1" rel="2.oe2203sp1"/>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 1.11.9-5" date="1652097600">- License compliance rectification</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 2.7.1-1" date="1666094400">- Update to 2.7.1</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2.7.1-2" date="1693396800">- Fix CVE-2022-47022</changelog>
</package>
<package pkgid="d9ca325d0430a144e901246e9b63dc594c82f758f420fba6eb1bf3cd2c4c488d" name="hyperscan" arch="src">
  <version epoch="0" ver="5.4.0" rel="3.oe2203sp1"/>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 5.2.1-3" date="1627128000">- Fix build error on X86</changelog>
  <changelog author="wangyong &lt;wangyong187@huawei.com&gt; - 5.2.1-4" date="1628078400">- Fix build error caused by GCC upgrade to GCC-10</changelog>
  <changelog author="sdlzx &lt;hdu_sdlzx@163.com&gt; - 5.4.0-1" date="1633521600">- Update to 5.4.0</changelog>
  <changelog author="Liu Zixian &lt;liuzixian4@huawei.com&gt; - 5.4.0-2" date="1666267200">- Sync upstream bugfix and enable regression test</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.4.0-3" date="1681992000">- Fix CVE-2022-29486</changelog>
</package>
<package pkgid="489d77f50c6fd83c6ccb04831fa7320b88fd8f33afc6195ce9d0d8f1010fba5b" name="hyperscan" arch="src">
  <version epoch="0" ver="5.4.2" rel="1.oe2203sp1"/>
  <changelog author="sdlzx &lt;hdu_sdlzx@163.com&gt; - 5.4.0-1" date="1633521600">- Update to 5.4.0</changelog>
  <changelog author="Liu Zixian &lt;liuzixian4@huawei.com&gt; - 5.4.0-2" date="1666267200">- Sync upstream bugfix and enable regression test</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.4.0-3" date="1681992000">- Fix CVE-2022-29486</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.4.2-1" date="1693569600">- Update to 5.4.2 for fix CVE-2023-28711</changelog>
</package>
<package pkgid="032fd945caeb1377031007fe48d108f7bf3fc2cd0af77f1e65f6dac7375d2b56" name="iSulad" arch="src">
  <version epoch="0" ver="2.0.18" rel="1.oe2203sp1"/>
  <changelog author="wangrunze &lt;wangrunze13@huawei.com&gt; - 2.0.17-6" date="1667390400">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: fix cleanup module memory leak</changelog>
  <changelog author="zhangxiaoyu &lt;zhangxiaoyu58@huawei.com&gt; - 2.0.17-7" date="1668600000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: update tar package from source</changelog>
  <changelog author="zhangxiaoyu &lt;zhangxiaoyu58@huawei.com&gt; - 2.0.17-8" date="1669032000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: fix cannot install isulad and unknown option</changelog>
  <changelog author="zhangxiaoyu &lt;zhangxiaoyu58@huawei.com&gt; - 2.0.17-9" date="1669377600">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: add primary group to additional groups</changelog>
  <changelog author="yangjiaqi &lt;yangjiaqi16@huawei.com&gt; - 2.0.17-10" date="1669636800">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: remove chmod 751 permission for dirs by engine when user-remap enabled</changelog>
  <changelog author="zhangxiaoyu &lt;zhangxiaoyu58@huawei.com&gt; - 2.0.17-11" date="1670328000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: update from upstream</changelog>
  <changelog author="zhangxiaoyu &lt;zhangxiaoyu58@huawei.com&gt; - 2.0.17-12" date="1671192000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: update from upstream</changelog>
  <changelog author="zhangxiaoyu &lt;zhangxiaoyu58@huawei.com&gt; - 2.0.17-13" date="1671451200">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: update lcr dependence version</changelog>
  <changelog author="zhangxiaoyu &lt;zhangxiaoyu58@huawei.com&gt; - 2.0.17-14" date="1671710400">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: remove clean_module_fill_ctx for libisulad_img.so</changelog>
  <changelog author="zhangxiaoyu &lt;zhangxiaoyu58@huawei.com&gt; - 2.0.18-1" date="1672747200">- Type: update
- ID: NA
- SUG: NA
- DESC: update to v2.0.18</changelog>
</package>
<package pkgid="eb4cfba8d5757465bf2a74b4e4955710d930bbec387d9ce5cc4bf44e0040f6f4" name="iSulad" arch="src">
  <version epoch="0" ver="2.0.18" rel="13.oe2203sp1"/>
  <changelog author="zhangxiaoyu &lt;zhangxiaoyu58@huawei.com&gt; - 2.0.18-4" date="1678363200">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhangxiaoyu &lt;zhangxiaoyu58@huawei.com&gt; - 2.0.18-5" date="1682337600">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: bugfix for runc and cri</changelog>
  <changelog author="zhangxiaoyu &lt;zhangxiaoyu58@huawei.com&gt; - 2.0.18-6" date="1683201600">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="wangrunze&lt;wangrunze13@huawei.com&gt; - 2.0.18-7" date="1683288000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: fix memrealloc size error and convert struct</changelog>
  <changelog author="penghaitao &lt;htpengc@isoftstone.com&gt; - 2.0.18-8" date="1683547200">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: fix bogus date in %changelog</changelog>
  <changelog author="zhangxiaoyu &lt;zhangxiaoyu58@huawei.com&gt; - 2.0.18-9" date="1685620800">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-10" date="1689768000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-11" date="1692100800">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-12" date="1692878400">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: code improvements and bugfix for code review</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-13" date="1695038400">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
</package>
<package pkgid="a7fe2e1dc927adf80feab86ea806dabfff51981dd5177effbb4f679f4b586859" name="iSulad" arch="src">
  <version epoch="0" ver="2.0.18" rel="14.oe2203sp1"/>
  <changelog author="zhangxiaoyu &lt;zhangxiaoyu58@huawei.com&gt; - 2.0.18-5" date="1682337600">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: bugfix for runc and cri</changelog>
  <changelog author="zhangxiaoyu &lt;zhangxiaoyu58@huawei.com&gt; - 2.0.18-6" date="1683201600">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="wangrunze&lt;wangrunze13@huawei.com&gt; - 2.0.18-7" date="1683288000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: fix memrealloc size error and convert struct</changelog>
  <changelog author="penghaitao &lt;htpengc@isoftstone.com&gt; - 2.0.18-8" date="1683547200">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: fix bogus date in %changelog</changelog>
  <changelog author="zhangxiaoyu &lt;zhangxiaoyu58@huawei.com&gt; - 2.0.18-9" date="1685620800">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-10" date="1689768000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-11" date="1692100800">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-12" date="1692878400">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: code improvements and bugfix for code review</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-13" date="1695038400">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-13" date="1703160000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
</package>
<package pkgid="863084525b3aea248e48cadfd5dca4b4781e5ac5902d3164ae99b154e1bbab34" name="iSulad" arch="src">
  <version epoch="0" ver="2.0.18" rel="16.oe2203sp1"/>
  <changelog author="wangrunze&lt;wangrunze13@huawei.com&gt; - 2.0.18-7" date="1683288000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: fix memrealloc size error and convert struct</changelog>
  <changelog author="penghaitao &lt;htpengc@isoftstone.com&gt; - 2.0.18-8" date="1683547200">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: fix bogus date in %changelog</changelog>
  <changelog author="zhangxiaoyu &lt;zhangxiaoyu58@huawei.com&gt; - 2.0.18-9" date="1685620800">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-10" date="1689768000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-11" date="1692100800">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-12" date="1692878400">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: code improvements and bugfix for code review</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-13" date="1695038400">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-14" date="1703160000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="yangjiaqi &lt;yangjiaqi16@huawei.com&gt; - 2.0.18-15" date="1703851200">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: keep the service status unchanged after iSulad service upgrade</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-16" date="1706616000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
</package>
<package pkgid="4af29417f14786b73bd330d51dbe2dc5d248862d850f5692b4e5507f1c55c345" name="iSulad" arch="src">
  <version epoch="0" ver="2.0.18" rel="17.oe2203sp1"/>
  <changelog author="penghaitao &lt;htpengc@isoftstone.com&gt; - 2.0.18-8" date="1683547200">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: fix bogus date in %changelog</changelog>
  <changelog author="zhangxiaoyu &lt;zhangxiaoyu58@huawei.com&gt; - 2.0.18-9" date="1685620800">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-10" date="1689768000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-11" date="1692100800">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-12" date="1692878400">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: code improvements and bugfix for code review</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-13" date="1695038400">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-14" date="1703160000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="yangjiaqi &lt;yangjiaqi16@huawei.com&gt; - 2.0.18-15" date="1703851200">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: keep the service status unchanged after iSulad service upgrade</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-16" date="1706616000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-17" date="1710849600">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
</package>
<package pkgid="98b18d8276a08846885a3e63c9edc08a0422131985242d344a09075800153438" name="iSulad" arch="src">
  <version epoch="0" ver="2.0.18" rel="18.oe2203sp1"/>
  <changelog author="zhangxiaoyu &lt;zhangxiaoyu58@huawei.com&gt; - 2.0.18-9" date="1685620800">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-10" date="1689768000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-11" date="1692100800">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-12" date="1692878400">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: code improvements and bugfix for code review</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-13" date="1695038400">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-14" date="1703160000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="yangjiaqi &lt;yangjiaqi16@huawei.com&gt; - 2.0.18-15" date="1703851200">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: keep the service status unchanged after iSulad service upgrade</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-16" date="1706616000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-17" date="1710849600">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-18" date="1718107200">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: bugfix for env/cri/fork</changelog>
</package>
<package pkgid="c0e3a43c4ba131ba4150d318ac4909511902b677f2032dc82df973db10e77544" name="ibus-typing-booster" arch="src">
  <version epoch="0" ver="2.16.0" rel="2.oe2203sp1"/>
  <changelog author="SimpleUpdate Robot &lt;tc@openeuler.org&gt; - 2.16.0-1" date="1655812800">- Upgrade to version 2.16.0</changelog>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 2.16.0-2" date="1705320000">- Avoid verbatim bidi formatting characters in the source code</changelog>
</package>
<package pkgid="7f185414eb04acad5ecc092ed644e888ea1b2aae76e13a8652788188a05c781e" name="icu" arch="src">
  <version epoch="0" ver="72.1" rel="6.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 72.1-1" date="1668513600">- update to icu4c-72.1</changelog>
  <changelog author="huajingyun &lt;huajingyun@loongson.cn&gt; - 72.1-2" date="1668772800">- add loongarch64 support</changelog>
  <changelog author="wuzx &lt;wuzx1226@qq.com&gt; - 72.1-3" date="1669032000">- Add sw64 architecture</changelog>
  <changelog author="zhouwenpei&lt;zhouwenpei1@h-partners.com&gt; - 72.1-4" date="1669032001">- Optimize the patch for add loongarch64 architecture</changelog>
  <changelog author="zhouwenpei&lt;zhouwenpei1@h-partners.com&gt; - 72.1-5" date="1671105600">- delete redundant files</changelog>
  <changelog author="zhangpan&lt;zhangpan103@h-partners.com&gt; - 72.1-6" date="1686657600">- delete taboo words</changelog>
</package>
<package pkgid="2222578f6ab84cbd429e7770107a59a8bd2107419f60a90ce9e29025d71667c9" name="indent" arch="src">
  <version epoch="0" ver="2.2.11" rel="29.oe2203sp1"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2.2.11-29" date="1693310400">- Fix CVE-2023-40305</changelog>
</package>
<package pkgid="d3653332f6f14bd563224b6ddfb9152c6ec53ee0fd51d34005a202cb9a050cd6" name="indent" arch="src">
  <version epoch="0" ver="2.2.11" rel="30.oe2203sp1"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2.2.11-29" date="1693310400">- Fix CVE-2023-40305</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.2.11-30" date="1707134400">- Fix CVE-2024-0911</changelog>
</package>
<package pkgid="e12f64cbb0e00e5316a4919f4551ede14098473b725bc5775deb97468e711120" name="infinispan" arch="src">
  <version epoch="0" ver="8.2.4" rel="13.oe2203sp1"/>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt;  - 8.2.4-11" date="1667995200">- Change source</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; - 8.2.4-12" date="1713009600">- Add -Xmx4096m for riscv64</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 8.2.4-13" date="1716811200">- Fix CVE-2019-10174</changelog>
</package>
<package pkgid="faa1649fe445f99b74f3dd5bf7160769a928acc64de1fc27727e6558733bb6b3" name="iniparser" arch="src">
  <version epoch="0" ver="4.1" rel="4.oe2203sp1"/>
  <changelog author="liqingqing_1229 &lt;liqingqing3@huawei.com&gt;" date="1602590400">- update source0</changelog>
  <changelog author="Ge Wang &lt;wangge20@huawei.com&gt; - 4.1-3" date="1611057600">- Modify license information.</changelog>
  <changelog author="yaoxin &lt;yaoxin20@h-partners.com&gt; - 4.1-4" date="1661169600">- Fix not striped problem
- Remove rpath</changelog>
</package>
<package pkgid="4a928a160888d75dca235243645331a74ba6c69f0db5824a588a90b370889187" name="iniparser" arch="src">
  <version epoch="0" ver="4.1" rel="5.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin20@h-partners.com&gt; - 4.1-4" date="1661169600">- Fix not striped problem
- Remove rpath</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 4.1-5" date="1687694400">- Fix CVE-2023-33461</changelog>
</package>
<package pkgid="fa4a39d6d4a5b3e59534410e677d60fb9e7eac3b8e9efeb43cfcb6942cfcef00" name="initscripts" arch="src">
  <version epoch="0" ver="10.17" rel="2.oe2203sp1"/>
  <changelog author="chenyanpanHW &lt;chenyanpan@huawei.com&gt; - 10.06-2" date="1627905600">- DESC: delete -S git from 
%setup       -q



/usr/bin/cat /home/lkp/rpmbuild/SOURCES/backport-run-ifdown-on-all-interfaces.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/bugfix-initscripts-add-udev-wait-dependency-for-network.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/bugfix-mod-network-function-when-NM-unmanage-devices.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/bugfix-initscripts-set-PERSISTENT_DHCLIENT-default-to-yes.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/bugfix-network-need-chkconfig-on.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/bugfix-restart-network-warning.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/new-network-fork-to-start-dhcp.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/exec-udevadm-settle-when-network-start.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/remove-rename_device_lock-when-process-does-not-exis.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

, and delete BuildRequires git</changelog>
  <changelog author="xinghe &lt;xinghe2@huawei.com&gt; - 10.12-1" date="1640001600">- Type:requirements
- ID:NA
- SUG:NA
- DESC: update initscripts to 10.12</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 10.12-2" date="1656590400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Initscripts no looger care about rc.local</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 10.12-3" date="1664452800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:remove redundant provide for service cmd and delete unnecessary obseletes to fix upgrade problem</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 10.17-1" date="1665748800">- Type:requirement
- ID:NA
- SUG:NA
- DESC:update initscripts to 10.17-1</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 10.17-2" date="1676894400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete Requires:dbus-tools</changelog>
</package>
<package pkgid="3d5a714170e476b2e1e91c52ebfae85e48fa6f7a1ff6dac3e5c9ace0b95d91a5" name="install-scripts" arch="src">
  <version epoch="0" ver="1.2" rel="6.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1.1-1" date="1646049600">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:initialize the source code of install-scripts</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1.1-2" date="1647604800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:get SI_GRUB2_PATH by ID in /etc/os-release</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1.2-1" date="1649419200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:update to version 1.2-1</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1.2-2" date="1655985600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add support for nvme disk</changelog>
  <changelog author="fushanqing &lt;fushanqing@kylinos.cn&gt; - 1.2-3" date="1660651200">- Unified license name specification</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1.2-4" date="1667649600">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:add support for mbsc</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1.2-5" date="1671451200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:after executing hook scripts, remove their executable permission
       of non root users</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1.2-6" date="1675425600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix missing Patch0003 in spec file</changelog>
</package>
<package pkgid="935755ce9e665e4548d0304098a958d3d0d2eff2fb13226398c887bf0d17ff03" name="iperf3" arch="src">
  <version epoch="0" ver="3.10.1" rel="3.oe2203sp1"/>
  <changelog author="liyanan &lt;liyanan32@huawei.com&gt; - 3.10.1-1" date="1641297600">- Upgrade to 3.10.1</changelog>
  <changelog author="wulei &lt;wulei80@h-partners.com&gt; - 3.10.1-2" date="1668427200">- Modifying the source code package address</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.10.1-3" date="1691409600">- Fix CVE-2023-38403</changelog>
</package>
<package pkgid="e88f584ce0cb6295547124b2218ae2d98b86b82f3a1ccda2a8d8ffab9ef1f3ee" name="iperf3" arch="src">
  <version epoch="0" ver="3.16" rel="1.oe2203sp1"/>
  <changelog author="wulei &lt;wulei80@h-partners.com&gt; - 3.10.1-2" date="1668427200">- Modifying the source code package address</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.10.1-3" date="1691409600">- Fix CVE-2023-38403</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.16-1" date="1712059200">- Upgrade to 3.16 for fix CVE-2023-7250</changelog>
</package>
<package pkgid="33972dee70a9478df46c2859e542dc1c2f58d950fe7260d4b848791d88667cb3" name="iperf3" arch="src">
  <version epoch="0" ver="3.16" rel="3.oe2203sp1"/>
  <changelog author="wulei &lt;wulei80@h-partners.com&gt; - 3.10.1-2" date="1668427200">- Modifying the source code package address</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.10.1-3" date="1691409600">- Fix CVE-2023-38403</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.16-1" date="1712059200">- Upgrade to 3.16 for fix CVE-2023-7250</changelog>
  <changelog author="jinzhiguang &lt;jinzhiguang@kylinos.cn&gt; - 3.16-2" date="1714392000">- add BuildRequires and Requires to enable sctp option</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.16-3" date="1715688000">- Fix CVE-2024-26306</changelog>
</package>
<package pkgid="fec354f0e9410d0f1ed03fcd3cef6364641059e99445e251e8a52b96a156d6f8" name="iproute" arch="src">
  <version epoch="1" ver="5.15.0" rel="12.oe2203sp1"/>
  <changelog author="jiangheng&lt;jiangheng12@huawei.com&gt; - 5.15.0-3" date="1646136000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: remove libcap-devel dependency</changelog>
  <changelog author="sunsuwan&lt;sunsuwan3@huawei.com&gt; - 5.15.0-4" date="1661515200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:lnstat: fix buffer overflow in header output 
       libnetlink: fix socket leak in rtnl_open_byptoyo
       lnstat: fix strdup leak in w argument parsing
       q_cake: allow fix buffer overflow on large labels
       tc flower: fix buffer overflow on large labels
       tc_tuil: fix parsing action control with space and sl
       tipc: fix keylen check
       fix devlink health dump command without arg
       tc: em_u32: fix offset parsing
       l2tp fix typo in AF_INET6 checksum JSON print
       ip: Fix size_columns() for very large values
       ip: Fix size_columns() invocation that passes a 32-bit quantity</changelog>
  <changelog author="jiangheng&lt;jiangheng14@huawei.com&gt; - 5.15.0-5" date="1665403200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:bridge: fix memory leak when doing fdb get
       mptcp: fix memory leak when doing 'endpoint show'
       mptcp: fix memory leak when getting limits
       ip neigh: fix memory leak when doing 'get'
       ip address: fix memory leak when specifying device
       fix marco expansion in changelog</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 5.15.0-6" date="1667995200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add ipvlan l2e mode support</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 5.15.0-7" date="1669032000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:enable make check</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 5.15.0-8" date="1671624000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:cancle man page check</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 5.15.0-9" date="1671710400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:cancel some test cases that failed due to host configure</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 5.15.0-10" date="1675252800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add epoch version</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:5.15.0-11" date="1675857600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add epoch version in changelog to fix check_spec_file ci failure</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:5.15.0-12" date="1676635200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add BuildRequire for make to fix build failure</changelog>
</package>
<package pkgid="602fb35028ab6524e38d3a78bc2f8ee125a834b3c7bc3cd4c70f9a3c55708caf" name="iproute" arch="src">
  <version epoch="1" ver="5.15.0" rel="13.oe2203sp1"/>
  <changelog author="sunsuwan&lt;sunsuwan3@huawei.com&gt; - 5.15.0-4" date="1661515200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:lnstat: fix buffer overflow in header output 
       libnetlink: fix socket leak in rtnl_open_byptoyo
       lnstat: fix strdup leak in w argument parsing
       q_cake: allow fix buffer overflow on large labels
       tc flower: fix buffer overflow on large labels
       tc_tuil: fix parsing action control with space and sl
       tipc: fix keylen check
       fix devlink health dump command without arg
       tc: em_u32: fix offset parsing
       l2tp fix typo in AF_INET6 checksum JSON print
       ip: Fix size_columns() for very large values
       ip: Fix size_columns() invocation that passes a 32-bit quantity</changelog>
  <changelog author="jiangheng&lt;jiangheng14@huawei.com&gt; - 5.15.0-5" date="1665403200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:bridge: fix memory leak when doing fdb get
       mptcp: fix memory leak when doing 'endpoint show'
       mptcp: fix memory leak when getting limits
       ip neigh: fix memory leak when doing 'get'
       ip address: fix memory leak when specifying device
       fix marco expansion in changelog</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 5.15.0-6" date="1667995200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add ipvlan l2e mode support</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 5.15.0-7" date="1669032000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:enable make check</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 5.15.0-8" date="1671624000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:cancle man page check</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 5.15.0-9" date="1671710400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:cancel some test cases that failed due to host configure</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 5.15.0-10" date="1675252800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add epoch version</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:5.15.0-11" date="1675857600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add epoch version in changelog to fix check_spec_file ci failure</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:5.15.0-12" date="1676635200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add BuildRequire for make to fix build failure</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 1:5.15.0-13" date="1677758400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix ip netns attach failed</changelog>
</package>
<package pkgid="4fd597de78879913f68a5b2bb729b37b388a68ce3be615a81e1129c489a411ff" name="iproute" arch="src">
  <version epoch="1" ver="5.15.0" rel="16.oe2203sp1"/>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 5.15.0-7" date="1669032000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:enable make check</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 5.15.0-8" date="1671624000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:cancle man page check</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 5.15.0-9" date="1671710400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:cancel some test cases that failed due to host configure</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 5.15.0-10" date="1675252800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add epoch version</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:5.15.0-11" date="1675857600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add epoch version in changelog to fix check_spec_file ci failure</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:5.15.0-12" date="1676635200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add BuildRequire for make to fix build failure</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 1:5.15.0-13" date="1677758400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix ip netns attach failed</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:5.15.0-14" date="1692273600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:ipnetns: fix fd leak with 'ip netns set'
       iproute2: optimize code and fix some mem-leak risk
       iproute_lwtunnel: fix array boundary check
       iproute_lwtunnel: fix possible use of NULL when malloc()
       m_action: fix warning of overwrite of const string
       netem: fix NULL deref on allocation failure
       nstat: fix potential NULL deref
       rdma/utils: fix some analyzer warnings
       rt_names: check for malloc() failure
       tc/prio: handle possible truncated kernel response
       tc_exec: don't dereference NULL on calloc failure
       tc_util fix unitialized warning
       iptunnel: detect protocol mismatch on tunnel change
       ipmaddr: fix dereference of NULL on malloc() failure</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:5.15.0-15" date="1692964800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: sync ipvlan_mode enum with kernel-headers</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:5.15.0-16" date="1698235200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:libnetlink: Fix memory leak in __rtnl_talk_iov()
       tc: ct: Fix invalid pointer dereference
       tc_util: Change datatype for maj to avoid overflow issue
       tc_util: Fix no error return when large parent id used
       xfrm: prepare state offload logic to set mode</changelog>
</package>
<package pkgid="7487b92382e5d1e3a8d71208d0ec1228d6203870f3f7c47929afeab44e4dffc7" name="ipset" arch="src">
  <version epoch="0" ver="7.15" rel="3.oe2203sp1"/>
  <changelog author="xinghe &lt;xinghe2@huawei.com&gt; - 7.15-1" date="1638619200">- Type:requirements
- ID:NA
- SUG:NA
- DESC: update ipset to 7.15</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 7.15-2" date="1666267200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Fix IPv6 sets nftables translation</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.15-3" date="1677585600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete *.a file</changelog>
</package>
<package pkgid="2ec370453e63d883596bb27b4c979d7b1b7f43dc6c4b88def13e75aa4e43b9bc" name="iputils" arch="src">
  <version epoch="0" ver="20221126" rel="1.oe2203sp1"/>
  <changelog author="xuxiaolong &lt;xuxiaolong23@huawei.com&gt; - 20200821-2" date="1615204800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix rdisc: remove PrivateUsers=yes from systemd service file</changelog>
  <changelog author="xihaochen &lt;xihaochen@huawei.com&gt; - 20210722-1" date="1638878400">- Type:requirements
- ID:NA
- SUG:NA
- DESC: update iputils to 20210722</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 20210722-2" date="1645185600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix arping -w command return error</changelog>
  <changelog author="eaglegai &lt;eaglegai@163.com&gt; - 20210722-3" date="1646481600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:revert process interrupts in ping*_receive_error_msg</changelog>
  <changelog author="eaglegai &lt;eaglegai@163.com&gt; - 20210722-4" date="1646913600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:backport to fix no reply when ping6 from Subnet-Router anycast address</changelog>
  <changelog author="zengweifeng &lt;zwfeng@huawei.com&gt; - 20210722-5" date="1650974400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: fix ping2 bingding to VRF and address
        Avoid binding to non-VRF
        Fix ARP protocol field for AX.25 and NETROM</changelog>
  <changelog author="eaglegai &lt;eaglegai@163.com&gt; - 20210722-6" date="1651838400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: fix exit code on -w option when count*interval &gt; timeout</changelog>
  <changelog author="zhongxuan &lt;zhongxuan2@huawei.com&gt; - 20210722-7" date="1669896000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: update Source0</changelog>
  <changelog author="zhongxuan &lt;zhongxuan2@huawei.com&gt; - 20221126-1" date="1678276800">- Type:requirements
- ID:NA
- SUG:NA
- DESC: update iputils to 20221126</changelog>
</package>
<package pkgid="5441d9696685dfd8611db6b0a0db7a679fabb0e73b127a722b011a345bdabeaf" name="iputils" arch="src">
  <version epoch="0" ver="20221126" rel="3.oe2203sp1"/>
  <changelog author="xihaochen &lt;xihaochen@huawei.com&gt; - 20210722-1" date="1638878400">- Type:requirements
- ID:NA
- SUG:NA
- DESC: update iputils to 20210722</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 20210722-2" date="1645185600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix arping -w command return error</changelog>
  <changelog author="eaglegai &lt;eaglegai@163.com&gt; - 20210722-3" date="1646481600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:revert process interrupts in ping*_receive_error_msg</changelog>
  <changelog author="eaglegai &lt;eaglegai@163.com&gt; - 20210722-4" date="1646913600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:backport to fix no reply when ping6 from Subnet-Router anycast address</changelog>
  <changelog author="zengweifeng &lt;zwfeng@huawei.com&gt; - 20210722-5" date="1650974400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: fix ping2 bingding to VRF and address
        Avoid binding to non-VRF
        Fix ARP protocol field for AX.25 and NETROM</changelog>
  <changelog author="eaglegai &lt;eaglegai@163.com&gt; - 20210722-6" date="1651838400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: fix exit code on -w option when count*interval &gt; timeout</changelog>
  <changelog author="zhongxuan &lt;zhongxuan2@huawei.com&gt; - 20210722-7" date="1669896000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: update Source0</changelog>
  <changelog author="zhongxuan &lt;zhongxuan2@huawei.com&gt; - 20221126-1" date="1678276800">- Type:requirements
- ID:NA
- SUG:NA
- DESC: update iputils to 20221126</changelog>
  <changelog author="zhongxuan &lt;zhongxuan2@huawei.com&gt; - 20221126-2" date="1685188800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: fix clockdiff host is down bug</changelog>
  <changelog author="zhongxuan &lt;zhongxuan2@huawei.com&gt; - 20221126-3" date="1685620800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: add Obsoletes for ninfod</changelog>
</package>
<package pkgid="d75ff5576c52de3fef418b853b2df2b947970d9bd0d27cfad81c575988d1fa87" name="jackson-databind" arch="src">
  <version epoch="0" ver="2.9.8" rel="10.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 2.9.8-9" date="1647000000">- Fix CVE-2019-17531</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.9.8-10" date="1702468800">- Fix CVE-2020-36518,CVE-2022-42003 and CVE-2022-42004</changelog>
</package>
<package pkgid="af6e480400c9fe05783366523d9d7ffca04821429b610c9fadbc13dd05609411" name="java-1.8.0-openjdk" arch="src">
  <version epoch="1" ver="1.8.0.372.b07" rel="0.oe2203sp1"/>
  <changelog author="yangjing &lt;yjing@hust.edu.cn&gt; - 1:1.8.0.362.b09-6" date="1682683200">- fix CVE-2023-21967.</changelog>
  <changelog author="crash888 &lt;wangmengqi13@huawei.com&gt; - 1:1.8.0.372-b07.0" date="1683720000">- deleted Add-ability-to-configure-third-port-for-remote-JMX.patch
- deleted 8287109-Distrust-failed-with-CertificateExpired.patch
- deleted Huawei-fix-windows-build-Dynamic-CDS-failure.patch
- deleted 8296480-Fix-the-problem-that-the-TestPolicy.java-cas.patch
- deleted 8296485-BuildEEBasicConstraints.java-test-fails-with.patch
- deleted fix-CVE-2023-21930.patch
- deleted fix-CVE-2023-21954.patch
- deleted fix-CVE-2023-21967.patch
- modified 8202951-Support-default-jsa.patch
- modified 8204595-add-more-thread-related-system-settings-info.patch
- modified 8257695-linux-Add-process-memory-information-to-hs-e.patch
- modified add-appcds-test-case.patch
- modified fix-log-bug-enhance-aes-hmac-performance.patch
- modified Test8167409.sh-fails-to-run-with-32bit-jdk-on-64bit-.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- modified add-missing-test-case.patch
- add fix-the-issue-that-cert-of-geotrustglobalca-expired.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- add 8074354-Make-CreateMinidumpOnCrash-a-new-name-and-av.patch    
- add jcmd-mnt-add-start-time-and-end-time.patch                    
- add Fix-localtime_r-not-defined-on-windows.patch                  
- add 8057743-process-Synchronize-exiting-of-threads-and-p.patch    
- add 8305541-C2-Div-Mod-nodes-without-zero-check-could-be.patch
- upgrade to jdk8u372-b07</changelog>
</package>
<package pkgid="9f5d9c5ad565edfe9a78ae2d7f4808a1d070fece21b696cd34f210db1a2ff074" name="java-1.8.0-openjdk" arch="src">
  <version epoch="1" ver="1.8.0.382.b05" rel="8.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.372-b07.2" date="1688040000">- 0002-8179498-attach-in-linux-should-be-relative-to-proc-p.patch
- 0003-8187408-AbstractQueuedSynchronizer-wait-queue-corrup.patch
- 0004-8193710-jcmd-l-and-jps-commands-do-not-list-Java-pro.patch
- 0005-8196743-jstatd-doesn-t-see-new-Java-processes-inside.patch
- 0006-8284330-jcmd-may-not-be-able-to-find-processes-in-th.patch
- 0007-8241670-Enhance-heap-region-size-ergonomics-to-impro.patch
- 0008-8223162-Improve-ergonomics-for-Sparse-PRT-entry-sizi.patch
- 0009-8262316-Reducing-locks-in-RSA-Blinding.patch
- 0010-8283994-Make-Xerces-DatatypeException-stackless.patch
- 0011-Optimizing-ObjectInputStream-by-FreqInlineSize.patch
- 0012-8301187-Memory-leaks-in-OopMapCache.patch
- 0013-8287349-AArch64-Merge-LDR-instructions-to-improve-C1.patch
- 0014-8280511-AArch64-Combine-shift-and-negate-to-a-single.patch
- 0015-6605915-jinfo-flag-flag-name-functionality-doesn-t-w.patch
- 0016-8036599-Use-Diagnostic-Commands-instead-of-SA-by-def.patch
- 0017-8054889-Compiler-team-s-implementation-task.patch
- 0018-8130832-Extend-the-WhiteBox-API-to-provide-informati.patch
- 0019-8040213-C2-does-not-put-all-modified-nodes-on-IGVN-w.patch
- 0020-8251216-Implement-MD5-Intrinsics-on-aarch64.patch
- 0021-fastdebug-fix-TestMD5Intrinsics.java-and-TestMD5Mult.patch
- 0022-8198510-Enable-UseDynamicNumberOfGCThreads-by-defaul.patch
- 0023-8180421-Change-default-value-of-BiasedLockingStartup.patch
- 0024-Fix-the-trim-crash-caused-by-incorrect-assert-in-fas.patch
- 0025-8220166-Performance-regression-in-deserialization.patch
- 0026-8072070-Improve-interpreter-stack-banging.patch
- 0027-8193386-CompressedClassSize-too-large-with-MaxMetasp.patch
- 0028-Display-more-information-about-the-codedump-file-pat.patch
- 0029-8211845-A-new-switch-to-control-verbosity-of-hs-err-.patch
- 0030-add-more-specific-possible-reasons-in-hs_error-log-w.patch
- 0031-8187653-Lock-in-CoderResult.Cache-becomes-performanc.patch
- 0032-8299158-Improve-MD5-intrinsic-on-AArch64.patch
- 0033-8211326-add-OS-user-related-information-to-hs_err-fi.patch
- 0034-8250902-Implement-MD5-Intrinsics-on-x64.patch
- 0035-8210821-Support-dns_canonicalize_hostname-in-krb5.co.patch
- 0036-8297656-AArch64-Enable-AES-GCM-Intrinsics.patch
- 0038-Record-file-descriptor-when-ExtensiveErrorReports-is.patch
- 0039-8243389-enhance-os-pd_print_cpu_info-on-linux.patch
- 0040-Print-the-Exception-event-in-more-detail.patch
- 0041-Reuse-translet-in-XSLTC-for-specjvm-xml-transform.patch
- 0042-8140581-Excluding-compile-messages-should-only-be-pr.patch
- 0043-Cache-dom-in-xml-transform.patch
- 0044-Record-file-descriptor-when-ExtensiveErrorReports-is.patch
- 0045-8276904-Optional.toString-is-unnecessarily-expensive.patch
- 0046-8210960-Allow-with-boot-jdk-jvmargs-to-work-during-c.patch
- 0047-8025692-Log-what-methods-are-touched-at-run-time.patch
- 0048-fix-jdk8-fastdebug-hotspot-test-compiler-c2-TestSpli.patch
- 0049-Modify-G1GC-log-information.patch
- 0050-8181644-C1-crashes-with-XX-PrintCFGToFile.patch
- 0051-8071962-The-SA-code-needs-to-be-updated-to-support-S.patch
- 0052-8177959-G1CollectedHeap-print_on-prints-incorrect-ca.patch
- 0053-8146987-Improve-Parallel-GC-Full-GC-by-caching-resul.patch
- 0054-Fix-jmap-heapdump-symbols-when-the-class-is-loaded-f.patch
- 0055-Fix-CodelistTest.java-Failed-to-Execute-CodelistTest.patch</changelog>
  <changelog author="wanghao_hw &lt;wanghao564@huawei.com&gt; - 1:1.8.0.382-b05.0" date="1690804800">- add Huawei-Print-more-information-when-AbortVMOnException.patch
- deleted patch 8185736-missing-default-exception-handler-in-calls-t.patch
- deleted patch cve-2022-37434-Fix-a-bug-when-getting-a-gzip-header-extra-field-with-inflate.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- modified add-missing-test-case.patch
- modified fix-the-issue-that-cert-of-geotrustglobalca-expired.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- add 8035986-KerberosKey-algorithm-names-are-not-specifie.patch
- add fixing-a-bug-in-the-processing-of-default-attributes.patch
- add enhance-java-heap-oom-err-log.patch
- add 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
- add 8179273-sun.net.httpserver.LeftOverInputStream-shoul.patch
- del --with-zlib=system
- upgrade to jdk8u382-b05</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.1" date="1691064000">- add Revert-backport-8035986-KerberosKey-algorithm-names-are-not-specified.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.2" date="1692878400">- deleted 0053-8146987-Improve-Parallel-GC-Full-GC-by-caching-resul.patch</changelog>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:1.8.0.382-b05.3" date="1692878401">- Init riscv64 support</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.4" date="1692964800">- add 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
- fix cve-2022-40433</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.5" date="1693396800">- del 0022-8198510-Enable-UseDynamicNumberOfGCThreads-by-defaul.patch</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:1.8.0.382-b05.6" date="1693569600">- removed cjc backward comaptiblity, to fix when both rpm 4.16 and 4.17 are in transaction</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.7" date="1694001600">- del 0013-8287349-AArch64-Merge-LDR-instructions-to-improve-C1.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.8" date="1694433600">- Fix openjfx bingding issues</changelog>
</package>
<package pkgid="75f8b632a0fce16e3aade9ce4f0781fdc3f0eebd0374245495e22763c87ca199" name="java-1.8.0-openjdk" arch="src">
  <version epoch="1" ver="1.8.0.392.b08" rel="2.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.4" date="1692964800">- add 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
- fix cve-2022-40433</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.5" date="1693396800">- del 0022-8198510-Enable-UseDynamicNumberOfGCThreads-by-defaul.patch</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:1.8.0.382-b05.6" date="1693569600">- removed cjc backward comaptiblity, to fix when both rpm 4.16 and 4.17 are in transaction</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.7" date="1694001600">- del 0013-8287349-AArch64-Merge-LDR-instructions-to-improve-C1.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.8" date="1694433600">- Fix openjfx bingding issues</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.9" date="1695384000">- add add-0010-8301749-Tracking-malloc-pooled-memory-size.patch
- add 8213397-Stack-dump-should-show-more-clearly-when-a-t.patch
- add Record-the-number-of-processes-to-errlog-file.patch.patch
- add 8254723-Add-diagnostic-command-to-write-Linux-perf-m.patch
- add The-OverWriteOldestGCLog-option-is-added-to-control.patch
- add add-6899049-G1-Clean-up-code-in-ptrQueue.-ch-pp-and-.patch
- add add-make-Appcds-jsa-rw-region-deterministic.patch
- add add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
- add add-8198423-Improve-metaspace-chunk-allocation.patch
- add add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
- add add-fix-lock_fd-no-close-and-improve-KAEProvider.patch
- add add-8242842-Avoid-reallocating-name-when-checking-fo.patch
- add add-8170831-ZipFile-implementation-no-longer-caches-.patch
- add add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
- add add-8226530-test-case-fixed.patch
- add add-8147940-Modify-testcase-this-test-does-not-assum.patch
- add add-8191924-Adjust-DelegatingClassLoader-s-metadata-.patch
- add add-Do-not-collect_class-when-DynamicCDS-dump.patch
- add add-add-Count-instance-klass-when-loading-from-jsa-f.patch
- add add-Adapting-IOException-of-Zip-to-ZipException.patch
- add add-8227041-runtime-memory-RunUnitTestsConcurrently.patch
- add add-fix-windows-build-Dynamic-CDS-failure.patch
- add add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch
- add 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.10" date="1695643200">- del useless code</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:1.8.0.392-b08.0" date="1697803200">- add 8308682-Enhance-AES-performance.patch
- add Fix-the-memory-leak-of-MetaspaceAllocationTest.patch
- add Add-metaspace-memory-allocation-failure-validation.patch
- add change-value-of-GCLockerRetryAllocationCount-from-2-.patch
- del 8202952.patch
- del 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
- modified Dynamic-CDS-Archive.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified kae-phase1.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- upgrade to jdk8u392-b08</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.1" date="1698235200">- add Fix-crash-in-JNI-s-GetDoubleArrayRegion-and-SetDoubl.patch
- add  8263557-Possible-NULL-dereference-in-Arena-destruct_.patch
- add 8294906-Memory-leak-in-PKCS11-NSS-TLS-server.patch
- add 8314236-Overflow-in-Collections.rotate.patch
- add 8313626-C2-crash-due-to-unexpected-exception-control.patch
- add 8312200-Fix-Parse-catch_call_exceptions-memory-leak.patch
- add 8193682-Infinite-loop-in-ZipOutputStream.close.patch
- add 8285516-clearPassword-should-be-called-in-a-finally-.patch
- add 8148470-Metadata-print-routines-should-not-print-to-.patch
- add 8293344-JDK-8242181-broke-stack-printing-for-non-att.patch
- add 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch
- add 8312065-Socket.connect-does-not-timeout-when-profili.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified add-missing-test-case.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.2" date="1698667200">- remove add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
- remove add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
- remove add-8242842-Avoid-reallocating-name-when-checking-fo.patch
- remove add-8170831-ZipFile-implementation-no-longer-caches-.patch
- remove add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
- remove add-8226530-test-case-fixed.patch
- remove add-Adapting-IOException-of-Zip-to-ZipException.patch</changelog>
</package>
<package pkgid="4a93a05015c089a4f8a233e9ca99a2631711ed2513d5da7e99d8d5c672796110" name="java-1.8.0-openjdk" arch="src">
  <version epoch="1" ver="1.8.0.402.b06" rel="0.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.7" date="1694001600">- del 0013-8287349-AArch64-Merge-LDR-instructions-to-improve-C1.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.8" date="1694433600">- Fix openjfx bingding issues</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.9" date="1695384000">- add add-0010-8301749-Tracking-malloc-pooled-memory-size.patch
- add 8213397-Stack-dump-should-show-more-clearly-when-a-t.patch
- add Record-the-number-of-processes-to-errlog-file.patch.patch
- add 8254723-Add-diagnostic-command-to-write-Linux-perf-m.patch
- add The-OverWriteOldestGCLog-option-is-added-to-control.patch
- add add-6899049-G1-Clean-up-code-in-ptrQueue.-ch-pp-and-.patch
- add add-make-Appcds-jsa-rw-region-deterministic.patch
- add add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
- add add-8198423-Improve-metaspace-chunk-allocation.patch
- add add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
- add add-fix-lock_fd-no-close-and-improve-KAEProvider.patch
- add add-8242842-Avoid-reallocating-name-when-checking-fo.patch
- add add-8170831-ZipFile-implementation-no-longer-caches-.patch
- add add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
- add add-8226530-test-case-fixed.patch
- add add-8147940-Modify-testcase-this-test-does-not-assum.patch
- add add-8191924-Adjust-DelegatingClassLoader-s-metadata-.patch
- add add-Do-not-collect_class-when-DynamicCDS-dump.patch
- add add-add-Count-instance-klass-when-loading-from-jsa-f.patch
- add add-Adapting-IOException-of-Zip-to-ZipException.patch
- add add-8227041-runtime-memory-RunUnitTestsConcurrently.patch
- add add-fix-windows-build-Dynamic-CDS-failure.patch
- add add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch
- add 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.10" date="1695643200">- del useless code</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:1.8.0.392-b08.0" date="1697803200">- add 8308682-Enhance-AES-performance.patch
- add Fix-the-memory-leak-of-MetaspaceAllocationTest.patch
- add Add-metaspace-memory-allocation-failure-validation.patch
- add change-value-of-GCLockerRetryAllocationCount-from-2-.patch
- del 8202952.patch
- del 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
- modified Dynamic-CDS-Archive.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified kae-phase1.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- upgrade to jdk8u392-b08</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.1" date="1698235200">- add Fix-crash-in-JNI-s-GetDoubleArrayRegion-and-SetDoubl.patch
- add  8263557-Possible-NULL-dereference-in-Arena-destruct_.patch
- add 8294906-Memory-leak-in-PKCS11-NSS-TLS-server.patch
- add 8314236-Overflow-in-Collections.rotate.patch
- add 8313626-C2-crash-due-to-unexpected-exception-control.patch
- add 8312200-Fix-Parse-catch_call_exceptions-memory-leak.patch
- add 8193682-Infinite-loop-in-ZipOutputStream.close.patch
- add 8285516-clearPassword-should-be-called-in-a-finally-.patch
- add 8148470-Metadata-print-routines-should-not-print-to-.patch
- add 8293344-JDK-8242181-broke-stack-printing-for-non-att.patch
- add 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch
- add 8312065-Socket.connect-does-not-timeout-when-profili.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified add-missing-test-case.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.2" date="1698667200">- remove add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
- remove add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
- remove add-8242842-Avoid-reallocating-name-when-checking-fo.patch
- remove add-8170831-ZipFile-implementation-no-longer-caches-.patch
- remove add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
- remove add-8226530-test-case-fixed.patch
- remove add-Adapting-IOException-of-Zip-to-ZipException.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.3" date="1698667201">- Add Add-Problemlist.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.4" date="1703073600">- Add Fix-an-error-caused-by-anonymous-when-AppCDS-generat.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:1.8.0.402-b06.0" date="1705492800">- modified 0019-8040213-C2-does-not-put-all-modified-nodes-on-IGVN-w.patch
- modified Improve_AlgorithmConstraints_checkAlgorithm_performance.patch
- modified add-missing-test-case.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified g1gc-numa-aware-Implementation.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- modified 8203699.patch
- add Add-CaptchaTest-and-fix-KAE-Testcases.patch
- add 8177146-MethodHandles.Lookup-bind-allows-illegal-pro.patch
- add Add-compiling-option-GS-when-building-windows-JDK.patch
- add Fix-for-JDK-8137099-for-G1-is-to-not-return-null-unt.patch
- add 8273553-sun.security.ssl.SSLEngineImpl.closeInbound-.patch
- add 8260923-Add-more-tests-for-SSLSocket-input-output-sh.patch
- add 8057967-CallSite-dependency-tracking-scales-devastat.patch
- add 8079205-CallSite-dependency-tracking-is-broken-after.patch</changelog>
</package>
<package pkgid="9e470d7707849bb7d6c21f0c9aa9dc5a23be71dd5a988a8c1ec34cca73334eaa" name="java-1.8.0-openjdk" arch="src">
  <version epoch="1" ver="1.8.0.412.b08" rel="5.oe2203sp1"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:1.8.0.402-b06.2" date="1708948800">- Fix build on riscv64</changelog>
  <changelog author="jiahua.yu &lt;jiahua.yu@shingroup.cn&gt; - 1:1.8.0.402-b06.3" date="1710244800">- Init support for arch ppc64le</changelog>
  <changelog author="Benshuai5D &lt;benshuai5d@163.com&gt; - 1:1.8.0.402-b06.4" date="1711800000">- add 8322725-tz-Update-Timezone-Data-to-2023d.patch
- add 8325150-tz-Update-Timezone-Data-to-2024a.patch
- add 8220175-serviceability-dcmd-framework-VMVersionTest..patch
- add 8149343-assert-rp-num_q-no_of_gc_workers-failed-sani.patch
- add 8139595-MethodHandles-remove_dependent_nmethod-is-no.patch
- add 8143408-Crash-during-InstanceKlass-unloading-when-cl.patch
- add GCC-12-reports-some-compiler-warnings.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.402-b06.5" date="1712059200">- add fix-GCC-12-build-jdk8-fastdebug-error.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.412-b08.0" date="1713441600">- del 8322725-tz-Update-Timezone-Data-to-2023d.patch
- del 8325150-tz-Update-Timezone-Data-to-2024a.patch
- del fix-the-length-value-of-ciBlock-in-ciMethodBlocks.cp.patch
- modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
- modified 8057743-process-Synchronize-exiting-of-threads-and-p.patch
- modified add-missing-test-case.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified kae-phase2.patch
- modified support-numactl-for-hadoop-yarn.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.412-b08.1" date="1714305600">- add 8256488-Use-ldpq-stpq-instead-of-ld4-st4-for-small-c.patch</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; -1:1.8.0.412-b08.2" date="1715083200">- fix LoongArch64-support.patch for prep error</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; -1:1.8.0.412-b08.3" date="1715083201">- add DependencyContext-mark_dependent_nmethods-crash-in-Dynamic-cds-mode.patch
- add 8138922-StubCodeDesc-constructor-publishes-partially-constructed.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; -1:1.8.0.412-b08.4" date="1715774400">- fix LoongArch64-support.patch error that apply patch on loongarch64 in prep stage
- fix loongson vendor error</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; -1:1.8.0.412-b08.5" date="1716465600">- Fix build on riscv64 in prep stage</changelog>
</package>
<package pkgid="9d048ba61fe78274ab53555d9655e2985fd1952b9537d6c00739b4a812246111" name="java-1.8.0-openjdk" arch="src">
  <version epoch="1" ver="1.8.0.412.b08" rel="6.oe2203sp1"/>
  <changelog author="jiahua.yu &lt;jiahua.yu@shingroup.cn&gt; - 1:1.8.0.402-b06.3" date="1710244800">- Init support for arch ppc64le</changelog>
  <changelog author="Benshuai5D &lt;benshuai5d@163.com&gt; - 1:1.8.0.402-b06.4" date="1711800000">- add 8322725-tz-Update-Timezone-Data-to-2023d.patch
- add 8325150-tz-Update-Timezone-Data-to-2024a.patch
- add 8220175-serviceability-dcmd-framework-VMVersionTest..patch
- add 8149343-assert-rp-num_q-no_of_gc_workers-failed-sani.patch
- add 8139595-MethodHandles-remove_dependent_nmethod-is-no.patch
- add 8143408-Crash-during-InstanceKlass-unloading-when-cl.patch
- add GCC-12-reports-some-compiler-warnings.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.402-b06.5" date="1712059200">- add fix-GCC-12-build-jdk8-fastdebug-error.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.412-b08.0" date="1713441600">- del 8322725-tz-Update-Timezone-Data-to-2023d.patch
- del 8325150-tz-Update-Timezone-Data-to-2024a.patch
- del fix-the-length-value-of-ciBlock-in-ciMethodBlocks.cp.patch
- modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
- modified 8057743-process-Synchronize-exiting-of-threads-and-p.patch
- modified add-missing-test-case.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified kae-phase2.patch
- modified support-numactl-for-hadoop-yarn.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.412-b08.1" date="1714305600">- add 8256488-Use-ldpq-stpq-instead-of-ld4-st4-for-small-c.patch</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; -1:1.8.0.412-b08.2" date="1715083200">- fix LoongArch64-support.patch for prep error</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; -1:1.8.0.412-b08.3" date="1715083201">- add DependencyContext-mark_dependent_nmethods-crash-in-Dynamic-cds-mode.patch
- add 8138922-StubCodeDesc-constructor-publishes-partially-constructed.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; -1:1.8.0.412-b08.4" date="1715774400">- fix LoongArch64-support.patch error that apply patch on loongarch64 in prep stage
- fix loongson vendor error</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; -1:1.8.0.412-b08.5" date="1716465600">- Fix build on riscv64 in prep stage</changelog>
  <changelog author="neu-mobi &lt;liuyulong35@huawei.com&gt; -1:1.8.0.412-b08.6" date="1718798400">- Fix aarch64 runtime thread signal transfer bug</changelog>
</package>
<package pkgid="503721005b55f2b23c0d91a7ac78b4dba1a63e26c469d6f563902ddcdce6cf64" name="java-1.8.0-openjdk" arch="src">
  <version epoch="1" ver="1.8.0.422.b05" rel="0.oe2203sp1"/>
</package>
<package pkgid="045dbca6625bfaafc7fa5b206cadf76f7650ee1c0c3bb886fe96a82bc29f7a66" name="java-11-openjdk" arch="src">
  <version epoch="1" ver="11.0.19.7" rel="3.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:11.0.15.10-1" date="1651147200">- add fix_X509TrustManagerImpl_symantec_distrust.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:11.0.16.8-0" date="1658836800">- modified 8224675-Late-GC-barrier-insertion-for-ZGC.patch
- modified ZGC-Redesign-C2-load-barrier-to-expand-on-th.patch
- modified fast-serializer-jdk11.patch
- modified dfx-enhancement-of-FastSerializer.patch
- modified 8210473-JEP-345-NUMA-Aware-Memory-Allocation-for-G1.patch
- modified src-openeuler-openjdk-11-resolve-code-inconsistencies.patch
- modified add-missing-inline.patch
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch
- delete fix_X509TrustManagerImpl_symantec_distrust.patch
- add fix_Internal_and_external_code_inconsistency.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:11.0.16.8-1" date="1659700800">- add 8290705_fix_StringConcat_validate_mem_flow_asserts_with_unexpected_userStoreI.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.17.6-0" date="1663588800">- update to 11.0.17+5
- modified NUMA-Aware-Implementation-humongous-region.patch
- modified Add-KAE-implementation.patch
- modified fast-serializer-jdk11.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.17.8-0" date="1666180800">- update to 11.0.17+8(GA)
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch
- modified PS-introduce-UsePSRelaxedForwardee-to-enable-using-r.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.18.10-0" date="1672920000">- update to 11.0.18+10(GA)
- modified 8231441-2-AArch64-Initial-SVE-backend-support.patch
- delete 8290705_fix_StringConcat_validate_mem_flow_asserts_with_unexpected_userStoreI.patch</changelog>
  <changelog author="Henry_Yang &lt;yangyudong3@huawei.com&gt; - 1:11.0.18.10-1" date="1672920001">- add 8222289-Overhaul-logic-for-reading-writing-constant-pool-entries.patch</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 1:11.0.18.10-2" date="1678363200">- fix the issue of %pretrans reporting error.</changelog>
  <changelog author="zhangyuting &lt;m202071389@hust.edu.cn&gt; - 1:11.0.18.10-3" date="1682683200">- fix CVE-2023-21930.</changelog>
  <changelog author="wanghao &lt;wanghao564@huawei.com&gt; - 1:11.0.19.7-0" date="1683547200">- update to 11.0.19+7(GA)
- deleted 8225648-TESTBUG-java-lang-annotation-loaderLeak-Main.patch
- modified Add-KAE-implementation.patch
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch
- modified delete_expired_certificates.patch
- modified 8205921-Optimizing-best_of_2-work-stealing-queue-selection.patch
- deleted fix-CVE-2023-21930.patch</changelog>
</package>
<package pkgid="68b10aed8ac7b5f073a60c235b5819ba04849223f5e1a850ae00adc65ea103c2" name="java-11-openjdk" arch="src">
  <version epoch="1" ver="11.0.20.8" rel="2.oe2203sp1"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:11.0.20.8-2" date="1692273600">- Add riscv64 support (based on bishengjdk riscv branch)</changelog>
</package>
<package pkgid="520a249ff3db5dda7c6782f2369b32f1af41051578a9ee5499bddc2e1f92f692" name="java-11-openjdk" arch="src">
  <version epoch="1" ver="11.0.21.9" rel="1.oe2203sp1"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:11.0.20.8-2" date="1692273600">- Add riscv64 support (based on bishengjdk riscv branch)</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.21.9-0" date="1697716800">- update to 11.0.21+9(GA)
- modified delete_expired_certificates.patch
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch 
- modified 8210473-JEP-345-NUMA-Aware-Memory-Allocation-for-G1.patch
- modified 8214527-AArch64-ZGC-for-Aarch64.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.21.9-1" date="1698062400">- add 8295068-SSLEngine-throws-NPE-parsing-Certificate.patch</changelog>
</package>
<package pkgid="49bacb6036df45ed516cd9ddc90e68581449ff56d400e4150d4acda95b2f038c" name="java-11-openjdk" arch="src">
  <version epoch="1" ver="11.0.22.7" rel="0.oe2203sp1"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:11.0.20.8-2" date="1692273600">- Add riscv64 support (based on bishengjdk riscv branch)</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.21.9-0" date="1697716800">- update to 11.0.21+9(GA)
- modified delete_expired_certificates.patch
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch 
- modified 8210473-JEP-345-NUMA-Aware-Memory-Allocation-for-G1.patch
- modified 8214527-AArch64-ZGC-for-Aarch64.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.21.9-1" date="1698062400">- add 8295068-SSLEngine-throws-NPE-parsing-Certificate.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.22.7-0" date="1705492800">- update to 11.0.22+7(GA)
- modified delete_expired_certificates.patch
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch</changelog>
</package>
<package pkgid="54d2cc76b41c384b6a6f9683f4b4666ddba34f688b2dee72ce46e156e5ce528c" name="java-11-openjdk" arch="src">
  <version epoch="1" ver="11.0.23.9" rel="2.oe2203sp1"/>
  <changelog author="Leslie Zhai &lt;zhaixiang@loongson.cn&gt; - 1:11.0.22.7-1" date="1708430400">- init support of LoongArch64</changelog>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:11.0.22.7-2" date="1708948800">- Fix build on riscv64</changelog>
  <changelog author="jiahua.yu &lt;jiahua.yu@shingroup.cn&gt; - 1:11.0.22.7-3" date="1710331200">- init support for arch ppc64le</changelog>
  <changelog author="huangjie &lt;huangjie150@huawei.com&gt; - 1:11.0.23.9-0" date="1713441600">- modified 8224675-Late-GC-barrier-insertion-for-ZGC.patch
- modified delete_expired_certificates.patch</changelog>
  <changelog author="huangjie &lt;huangjie150@huawei.com&gt; - 1:11.0.23.9-0" date="1714392000">- modified delete_expired_certificates.patch</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 1:11.0.23.9-1" date="1714996800">- recompress the source0</changelog>
</package>
<package pkgid="4801b0c8995c32adc85004d17509a495a9ea9f06a2a779b27cb2885778546f89" name="java-11-openjdk" arch="src">
  <version epoch="1" ver="11.0.24.8" rel="0.oe2203sp1"/>
</package>
<package pkgid="1753db3ba343d85b6a57347193bfed330750589931fc7d98034d6aa46fe75ba3" name="java-17-openjdk" arch="src">
  <version epoch="1" ver="17.0.11.9" rel="1.oe2203sp1"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:17.0.8.7-1" date="1691496000">- Add riscv64 support</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.8.7-2" date="1695643200">- add add-Parallel-Full-gc-mark-stack-draining-should.patch
- add add-8271579-G1-Move-copy-before-CAS-in-do_copy.patch
- add add-8267185-Add-string-deduplication-support-to.patch
- add add-8292296-Use-multiple-threads-to-process-Par.patch
- add fix-cds-SignedJar_java-test-fails.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.9.8-0.rolling" date="1697544000">- fix 8253495-CDS-generates-non-deterministic-outpu.patch
- fix add-8267185-Add-string-deduplication-support-to.patch
- fix add-version-txt.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.9.8-1" date="1698321600">- add 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch
- add 8316576-com.sun.jndi.ldap.Connection.cleanup-does-no.patch
- add 8314063-The-socket-is-not-closed-in-Connection-creat.patch
- add 8314236-Overflow-in-Collections.rotate.patch
- add 8313626-C2-crash-due-to-unexpected-exception-control.patch
- add 8168469-Memory-leak-in-JceSecurity.patch
- add 8312065-Socket.connect-does-not-timeout-when-profili.patch
- add 8285516-clearPassword-should-be-called-in-a-finally-.patch
- add 8312200-Fix-Parse-catch_call_exceptions-memory-leak.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.9.8-2" date="1701086400">- Add vendor name</changelog>
  <changelog author="neu-mobi &lt;liuyulong.work@qq.com&gt; - 1:17.0.10.9-0.rolling" date="1705579200">- del 8168469-Memory-leak-in-JceSecurity.patch
- del 8275509-ModuleDescriptor.hashCode-isn-t-rep.patch
- del 8275509-ModuleDescriptor.hashCode-isn-t-reproducible.patch
- del 8285516-clearPassword-should-be-called-in-a-finally-.patch
- del 8312065-Socket.connect-does-not-timeout-when-profili.patch
- del 8313626-C2-crash-due-to-unexpected-exception-control.patch
- del 8314063-The-socket-is-not-closed-in-Connection-creat.patch
- del 8316576-com.sun.jndi.ldap.Connection.cleanup-does-no.patch
- modified 8253495-CDS-generates-non-deterministic-outpu.patch
- modified 8280872-Reorder-code-cache-segments-to-improv.patch
- modified add-version-txt.patch
- add Add-problemlist.patch
- add puyuan-jdk17.0.9-patch.patch</changelog>
  <changelog author="Leslie Zhai &lt;zhaixiang@loongson.cn&gt; - 1:17.0.10.9-1" date="1708344000">- Rebase LoongArch64 patch</changelog>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:17.0.10.9-2" date="1708948800">- Remove riscv64 support patch, already upstreamed</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:17.0.11.9-0.rolling" date="1713441600">- del 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch
- modify puyuan-jdk17.0.9-patch.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1:17.0.11.9-1" date="1715860800">- rewrite LoongArch64-support.patch to sovle error while applying this patch in prep stage
- fix loongarch vendor error and delete redundant vendor args</changelog>
</package>
<package pkgid="102785306b106e40c59ba511fe6e29a91a9e76cf50f57319a85647789b1a2fd1" name="java-17-openjdk" arch="src">
  <version epoch="1" ver="17.0.12.7" rel="0.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.9.8-2" date="1701086400">- Add vendor name</changelog>
  <changelog author="neu-mobi &lt;liuyulong.work@qq.com&gt; - 1:17.0.10.9-0.rolling" date="1705579200">- del 8168469-Memory-leak-in-JceSecurity.patch
- del 8275509-ModuleDescriptor.hashCode-isn-t-rep.patch
- del 8275509-ModuleDescriptor.hashCode-isn-t-reproducible.patch
- del 8285516-clearPassword-should-be-called-in-a-finally-.patch
- del 8312065-Socket.connect-does-not-timeout-when-profili.patch
- del 8313626-C2-crash-due-to-unexpected-exception-control.patch
- del 8314063-The-socket-is-not-closed-in-Connection-creat.patch
- del 8316576-com.sun.jndi.ldap.Connection.cleanup-does-no.patch
- modified 8253495-CDS-generates-non-deterministic-outpu.patch
- modified 8280872-Reorder-code-cache-segments-to-improv.patch
- modified add-version-txt.patch
- add Add-problemlist.patch
- add puyuan-jdk17.0.9-patch.patch</changelog>
  <changelog author="Leslie Zhai &lt;zhaixiang@loongson.cn&gt; - 1:17.0.10.9-1" date="1708344000">- Rebase LoongArch64 patch</changelog>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:17.0.10.9-2" date="1708948800">- Remove riscv64 support patch, already upstreamed</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:17.0.11.9-0.rolling" date="1713441600">- del 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch
- modify puyuan-jdk17.0.9-patch.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1:17.0.11.9-1" date="1715860800">- rewrite LoongArch64-support.patch to sovle error while applying this patch in prep stage
- fix loongarch vendor error and delete redundant vendor args</changelog>
  <changelog author="aoqi &lt;aoqi@loongson.cn&gt; - 1:17.0.11.9-2" date="1718884800">- update LoongArch64 port to 17.0.11</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:17.0.11.9-3" date="1720094400">- add jdk17-Add-KAE-provider.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1:17.0.11.9-4" date="1721131200">- null the arg to solve openjdk-headless install error</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:17.0.12.7-0" date="1721304000">- modify 8280872-Reorder-code-cache-segments-to-improv.patch
- update to 17.0.12+7(ga)</changelog>
</package>
<package pkgid="090f80e7aa6af110858f6a6684aed40e0836153a414456c44d7b9e4beefdb909" name="java-17-openjdk" arch="src">
  <version epoch="1" ver="17.0.7.7" rel="1.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.4.8-0.1" date="1659700800">- add 8290705_fix_StringConcat_validate_mem_flow_asserts_with_unexpected_userStoreI.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.4.8-0.2" date="1659700801">- del pr3183-rh1340845-support_system_crypto_policy.patch
- del rh1648249-add_commented_out_nss_cfg_provider_to_java_security.patch
- del rh1648644-java_access_bridge_privileged_security.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.4.8-0.3" date="1663243200">- add Apply-TBI-to-ZGC-of-JDK17.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.5.8-0.rolling" date="1666180800">- modified add-version-txt.patch
- add jdk17.0.5-ga</changelog>
  <changelog author="neu-mobi &lt;liuyulong.work@qq.com&gt; - 1:17.0.5.8-0.1" date="1672920000">- add 8253495-CDS-generates-non-deterministic-outpu.patch
- add 8296480-Fix-the-problem-that-the-TestPolicy.j.patch
- add 8296485-BuildEEBasicConstraints.java-test-fai.patch
- add Fast-Serializer.patch
- add Apply-TBI-barrier-patch-to-C1.patch
- add Add-Fast-serializer-testcase.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.6.9-0.rolling" date="1674907200">- modified add-version-txt.patch
- del 8290705_fix_StringConcat_validate_mem_flow_asserts_with_unexpected_userStoreI.patch
- del 8296480-Fix-the-problem-that-the-TestPolicy.j.patch
- del 8296485-BuildEEBasicConstraints.java-test-fai.patch
- del Add-Fast-serializer-testcase.patch
- add jdk17.0.6-ga</changelog>
  <changelog author="crash888 &lt;wangmengqi13@huawei.com&gt; - 1:17.0.6.9-0.1" date="1679572800">- del --whth-lcms=system</changelog>
  <changelog author="crash888 &lt;wangmengqi13@huawei.com&gt; - 1:17.0.6.9-0.2" date="1679918400">- add libstdc++-static and del --with-static++lib=dynamic</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:17.0.7.7-0.rolling" date="1683201600">- add 8275509-ModuleDescriptor.hashCode-isn-t-reproducible.patch
- modified add-version-txt.patch
- modified 8253495-CDS-generates-non-deterministic-outpu.patch
- modified Delete-expired-certificate.patch
- modified Apply-TBI-to-ZGC-of-JDK17.patch
- add jdk17.0.7-ga</changelog>
  <changelog author="wanghao_hw &lt;wanghao564@huawei.com&gt; - 1:17.0.7.7-0.1" date="1685448000">- add 8280872-Reorder-code-cache-segments-to-improv.patch</changelog>
</package>
<package pkgid="611a9ce001cbd54834bf825ff46ecdf8089189c4ef0b602201be5e19843844dd" name="java-latest-openjdk" arch="src">
  <version epoch="1" ver="20.0.2.9" rel="1.rolling.oe2203sp1"/>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:18.0.0.37-0.0.ea.rolling" date="1650974400">- Update to jdk-18.0.0.0+37
- adjust rh1684077-openjdk_should_depend_on_pcsc-lite-libs_instead_of_pcsc-lite-devel.patch</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:18.0.0.37-1.rolling" date="1651752000">- set build jdk to 18</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:18.0.1.10-0-rolling" date="1651924800">- Update to jdk-18.0.1+10</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:18.0.2.9-0-rolling" date="1658836800">- Update to jdk-18.0.2+9</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; -1:19.0.0.36-0.0.ea.rolling" date="1666872000">- Update to jdk-19.0.0.0+36
- Remove references to sample directory removed by JDK-8284999
- Need to include the '.S' suffix in debuginfo checks after JDK-8284661</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:19.0.0.36-1.rolling" date="1667390400">- set build jdk to 19</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:19.0.2.7-0-rolling" date="1675252800">- Update to jdk-19.0.2+7</changelog>
  <changelog author="wanghao &lt;wanghao564@huawei.com&gt; - 1:20.0.1.9-0-rolling" date="1683201600">- Update to jdk-20.0.1+9
- remove pr3183-rh1340845-support_system_crypto_policy.patch</changelog>
  <changelog author="wanghao &lt;wanghao564@huawei.com&gt; - 1:20.0.2.9-0-rolling" date="1691064000">- Update to jdk-20.0.2+9</changelog>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:20.0.2.9-1-rolling" date="1691409600">- Add riscv64 to jit_arches</changelog>
</package>
<package pkgid="5718b5f2c8f98e11b58c32149837c04b2cedaac82f3deff24bf01c526d63e0e7" name="java-latest-openjdk" arch="src">
  <version epoch="1" ver="21.0.0.35" rel="1.rolling.oe2203sp1"/>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:18.0.0.37-0.0.ea.rolling" date="1650974400">- Update to jdk-18.0.0.0+37
- adjust rh1684077-openjdk_should_depend_on_pcsc-lite-libs_instead_of_pcsc-lite-devel.patch</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:18.0.0.37-1.rolling" date="1651752000">- set build jdk to 18</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:18.0.1.10-0-rolling" date="1651924800">- Update to jdk-18.0.1+10</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:18.0.2.9-0-rolling" date="1658836800">- Update to jdk-18.0.2+9</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; -1:19.0.0.36-0.0.ea.rolling" date="1666872000">- Update to jdk-19.0.0.0+36
- Remove references to sample directory removed by JDK-8284999
- Need to include the '.S' suffix in debuginfo checks after JDK-8284661</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:19.0.0.36-1.rolling" date="1667390400">- set build jdk to 19</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:19.0.2.7-0-rolling" date="1675252800">- Update to jdk-19.0.2+7</changelog>
  <changelog author="wanghao &lt;wanghao564@huawei.com&gt; - 1:20.0.1.9-0-rolling" date="1683201600">- Update to jdk-20.0.1+9
- remove pr3183-rh1340845-support_system_crypto_policy.patch</changelog>
  <changelog author="wanghao &lt;wanghao564@huawei.com&gt; - 1:20.0.2.9-0-rolling" date="1691064000">- Update to jdk-20.0.2+9</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:21.0.0.35-0-rolling" date="1696680000">* Mon Aug 07 2023 misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:20.0.2.9-1-rolling
- Add riscv64 to jit_arches</changelog>
</package>
<package pkgid="63bf88dbb8a53a9728151f67bf98a6d52e8fc642524c7f004f46747f3cf7fc92" name="jbig2dec" arch="src">
  <version epoch="0" ver="0.19" rel="5.oe2203sp1"/>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 0.19-4" date="1666872000">- Type:feature
- CVE:NA
- SUG:NA
- DESC:Add sw64 architecture</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.19-5" date="1724932800">- fix CVE-2023-46361</changelog>
</package>
<package pkgid="abd2c83948bc6e50349a956b66ad3d286027395ed919ca765ddd196713fb77a8" name="jemalloc" arch="src">
  <version epoch="0" ver="5.3.0" rel="1.oe2203sp1"/>
  <changelog author="wulei &lt;wulei80@huawei.com&gt; - 5.1.0-4" date="1622635200">- fixes failed: no acceptable C compiler found in $PATH</changelog>
  <changelog author="weidong &lt;weidong@uniontech.com&gt; - 5.2.1-1" date="1626782400">- Update jemlloc</changelog>
  <changelog author="guominghong &lt;guominghong@huawei.com&gt; - 5.2.1-2" date="1635940800">- Fix large bin index accessed through cache bin descriptor</changelog>
  <changelog author="guominghong &lt;guominghong@huawei.com&gt; - 5.2.1-3" date="1637064000">- Fix Undefined Behavior in hash.h</changelog>
  <changelog author="guominghong &lt;guominghong@huawei.com&gt; - 5.2.1-4" date="1637064001">- Fix tcaches mutex pre-post fork handling</changelog>
  <changelog author="guominghong &lt;guominghong@huawei.com&gt; - 5.2.1-5" date="1638446400">- Fix spec check</changelog>
  <changelog author="Ge Wang &lt;wangge@h-partner.com&gt; - 5.2.1-6" date="1652184000">- License compliance rectification</changelog>
  <changelog author="doupengda &lt;doupengda@loongson.cn&gt; - 5.2.1-7" date="1668513600">- add loongarch64 support</changelog>
  <changelog author="mengwenhua &lt;mengwenhua@xfusion.com&gt; - 5.2.1-8" date="1673265600">- Correct tsd layout graph</changelog>
  <changelog author="mawenshuo &lt;mawenshuo1@huawei.com&gt; - 5.3.0-1" date="1678190400">- Upgrade to 5.3.0</changelog>
</package>
<package pkgid="f7e2aaaaf89766e0c5aec1e10cd29dff66df0b942765e5b69c86956a6b5992a8" name="jersey" arch="src">
  <version epoch="0" ver="2.29.1" rel="2.oe2203sp1"/>
  <changelog author="liujing &lt;liujing@xfusion.com&gt; - 2.29.1-2" date="1703592000">- fix CVE-2021-28168</changelog>
</package>
<package pkgid="08f91b796e6fab44c093f159636363d388bde4e700283ad39e5b828fbf06e9a1" name="jettison" arch="src">
  <version epoch="0" ver="1.5.4" rel="1.oe2203sp1"/>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1.5.4-1" date="1701950400">- Upgrade to 1.5.4 for fix cves: CVE-2022-40149,CVE-2022-40150,
  CVE-2022-45685,CVE-2022-45693 and CVE-2023-1436</changelog>
</package>
<package pkgid="18003bb313e902f03840c0955cd31a481c1b16804b1dc9656cdc6f25b2ecd647" name="jetty" arch="src">
  <version epoch="0" ver="9.4.16" rel="3.oe2203sp1"/>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-5" date="1612785600">- fix CVE-2020-27216</changelog>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-6" date="1615982400">- fix CVE-2020-27223</changelog>
  <changelog author="wangxiao &lt;wangxiao65@huawei.com&gt; - 9.4.15-7" date="1619006400">- Fix CVE-2021-28165</changelog>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 9.4.15-8" date="1624449600">- Fix CVE-2021-28169</changelog>
  <changelog author="wutao &lt;wutao61@huawei.com&gt; - 9.4.15-9" date="1625140800">- Fix CVE-2021-34428</changelog>
  <changelog author="liangqifeng &lt;liangqifeng@ncti-gba.cn&gt; - 9.4.16-1" date="1663070400">- update to 9.4.14 to Fix CVE-2019-10241</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 9.4.16-2" date="1666612800">- fix selfbuild error</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-3" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
</package>
<package pkgid="bd4c6b310ede2cfc65ea56766d451bd2115f8349383263dc8c7e9d66925741c1" name="jffi" arch="src">
  <version epoch="0" ver="1.2.13" rel="3.oe2203sp1"/>
  <changelog author="wulei &lt;wu_lei@hoperun.com&gt; - 1.2.13-2" date="1684411200">- Add Buildrequires apache-parent package to fix pkg_vcmp macro not being recognized</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 1.2.13-3" date="1687953600">- refix pkg_vcmp macro not being recognized</changelog>
</package>
<package pkgid="da03504ef81c827134055ddfd44f6d6dda91af1cf23a92ebfdd15f82f7aff63b" name="jgit" arch="src">
  <version epoch="0" ver="5.11.0" rel="3.oe2203sp1"/>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.4.0-2" date="1663934400">- Add glassfish-servlet-api version limit</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 5.11.0-1" date="1669377600">- Update to 5.11.0</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 5.11.0-2" date="1680091200">- Add classpath to resolve NoClassDefFoundError</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.11.0-3" date="1703592000">- Fix CVE-2023-4759</changelog>
</package>
<package pkgid="81f7240cb5b3e0109ff1f88eb7066f10a384876afc2ebd5b62814f35ccfef17c" name="jose" arch="src">
  <version epoch="0" ver="11" rel="2.oe2203sp1"/>
  <changelog author="licihua&lt;licihua@huawei.com&gt; - 11-2" date="1712491200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: fix CVE-2023-50967</changelog>
</package>
<package pkgid="c291de8685973f78faca09a2a54ed67694f0471d04ff5981e527141a239e62a9" name="jruby" arch="src">
  <version epoch="0" ver="1.7.22" rel="2.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1.7.22-2" date="1678363200">- Fix build failure due to snakeyaml update to 1.32</changelog>
</package>
<package pkgid="de537e82d99bc3411a1b5dd948cbb4a564511c542f14754073b6b3e72028f3db" name="jruby" arch="src">
  <version epoch="0" ver="1.7.22" rel="4.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1.7.22-2" date="1678363200">- Fix build failure due to snakeyaml update to 1.32</changelog>
  <changelog author="Ge Wang &lt;wang__ge@126.com&gt; - 1.7.22-3" date="1684497600">- Add install dependency base64coder</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.7.22-4" date="1706270400">- Fix CVE-2023-28756</changelog>
</package>
<package pkgid="84356aa7d5d34e3611b8a94d0ef08c5b8512788cf01a8ed070aebca12f39d68b" name="json-c" arch="src">
  <version epoch="0" ver="0.16" rel="4.oe2203sp1"/>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 0.13.1-9" date="1631188800">- fix broken RDRAND causes infinite looping</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.15-1" date="1631620800">- update to 0.15</changelog>
  <changelog author="wuchaochao &lt;cyanrose@yeah.net&gt; - 0.15-2" date="1648209600">- move json-c</changelog>
  <changelog author="wuchaochao &lt;cyanrose@yeah.net&gt; - 0.15-3" date="1649332800">- add check</changelog>
  <changelog author="wuchaochao &lt;cyanrose@yeah.net&gt; - 0.15-4" date="1651838400">- add   backport-json-escape-str-avoid-harmless-unsigned-integer-overflow.patch</changelog>
  <changelog author="fengtao &lt;fengtao40@huawei.com&gt; - 0.15-5" date="1653393600">- we got upgrade error when upgrade json-c from very low version,
  for example json-c-0.11-5. because old version has a softlink:
  /usr/include/json-c  --&gt; /usr/include/json
  and now, softlink has been removed. so, we fix this in pretrans</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.16-1" date="1667649600">- Update to 0.16</changelog>
  <changelog author="mengkanglai &lt;mengkanglai2@huawei.com&gt; - 0.16-2" date="1668427200">- add backport-Add-test-to-check-for-the-memory-leak-mentioned-in-issue-781.patch
- add backport-Fix-memory-leak-with-emtpy-strings-in-json_object_set_string.patch
- add backport-json_object_from_fd_ex-fail-if-file-is-too-large.patch</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.16-3" date="1682078400">- backport patch to fix integer overflow</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 0.16-4" date="1693828800">- backport patch to Fix build with clang-15+
- backport patch to Fix json_tokener_parse_ex: handle out of memory errors</changelog>
</package>
<package pkgid="eaff2d2cbba9e44eafda6988d52f4eaf9e70a6d93f5e67070d870fe8d283cb61" name="json-path" arch="src">
  <version epoch="0" ver="2.1.0" rel="2.oe2203sp1"/>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.1.0-2" date="1709294400">- Fix CVE-2023-51074</changelog>
</package>
<package pkgid="7e73b09d0eb59d805247b9fd178245f303f3c2278a533b67c5f6a9b0f5c0b267" name="json-smart" arch="src">
  <version epoch="0" ver="2.2" rel="2.oe2203sp1"/>
  <changelog author="liyuxiang &lt;liyuxiang@ncti-gba.cn&gt; - 2.2-2" date="1680609600">- fix CVE-2023-1370</changelog>
</package>
<package pkgid="9e9aaa67770ab4f553ccf844d65bf2d9956371faa5065508803cd4ac275839a9" name="jsoup" arch="src">
  <version epoch="0" ver="1.14.2" rel="2.oe2203sp1"/>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1.14.2-2" date="1709553600">- Fix CVE-2022-36033</changelog>
</package>
<package pkgid="b7a26aefb875edff47069ee435f9ee8f1d6e54ed2f796859112807c1311392d3" name="kae_driver" arch="src">
  <version epoch="0" ver="2.0.0" rel="2.oe2203sp1"/>
  <changelog author="zhongkeyi &lt;zhongkeyi1@huawei.com&gt; - 2.0.0-1" date="1645531200">- update kernel to adapt uadk</changelog>
  <changelog author="panxiaohe &lt;pan_xiaohe@hoperun.com&gt; - 2.0.1-2" date="1678449600">- Add BuildRequires uname-build-checks to get correct kernel_version</changelog>
</package>
<package pkgid="0059359179305beb2c50712797218aafd89c0ff44c04093f7b313717ac99e881" name="kata-containers" arch="src">
  <version epoch="0" ver="1.11.1" rel="26.oe2203sp1"/>
  <changelog author="gaohuatao &lt;gaohuatao@huawei.com&gt; - 1.11.1-17" date="1623844800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:move timeout of waitProcess to stop process</changelog>
  <changelog author="yangfeiyu &lt;yangfeiyu2@huawei.com&gt; - 1.11.1-18" date="1638273600">- Type:feature
- ID:NA
- SUG:NA
- DESC:bump version to 18</changelog>
  <changelog author="yangfeiyu &lt;yangfeiyu2@huawei.com&gt; - 1.11.1-19" date="1641556800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:set GO111MODULE off for go version 1.17.3</changelog>
  <changelog author="yangfeiyu &lt;yangfeiyu2@huawei.com&gt; - 1.11.1-20" date="1645444800">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:check file size before add nic</changelog>
  <changelog author="yangfeiyu &lt;yangfeiyu2@huawei.com&gt; - 1.11.1-21" date="1645790400">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:modify hypervisor parameters in config file</changelog>
  <changelog author="yangfeiyu &lt;yangfeiyu2@huawei.com&gt; - 1.11.1-22" date="1646049600">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:use host_device drive when call blockdev-add</changelog>
  <changelog author="yangfeiyu &lt;yangfeiyu2@huawei.com&gt; - 1.11.1-23" date="1646308800">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:modify runtime build flags</changelog>
  <changelog author="Vanient&lt;xiadanni1@huawei.com&gt; - 1.11.1-24" date="1662984000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync bugfix patches, runtime 0079-0096 agent 0021-0024</changelog>
  <changelog author="Vanient&lt;xiadanni1@huawei.com&gt; - 1.11.1-25" date="1668686400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add timeout for all qmp commands</changelog>
  <changelog author="Vanient&lt;xiadanni1@huawei.com&gt; - 1.11.1-26" date="1675339200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove kernel_irqchip option for qemu 6.2</changelog>
</package>
<package pkgid="595befdc926cbef3d039fd45055ea5510a900a4dacaa6722248bc95463b3a1f6" name="kbd" arch="src">
  <version epoch="0" ver="2.5.1" rel="2.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.5.1-1" date="1667476800">- update to 2.5.1</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.5.1-2" date="1717070400">- resolve gzip time eliminate differences</changelog>
</package>
<package pkgid="f1f7b84f770617a7819012a32811d4d7a139b07a58c04439aeed4d84814b65ff" name="kernel" arch="src">
  <version epoch="0" ver="5.10.0" rel="136.14.2.90.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.1.0.76" date="1670846400">- coresight: trbe: Enable ACPI/Platform automatic module loading
- arm64/trbe: Add initial MADT/SPE probing
- ACPI 6.5: MADT: add support for trace buffer extension in GICC
- coresight: Return the pointer of @pdata when not "fwnode"
- blk-mq: don't access request_wrapper if request is not allocated from block layer
- blk-mq: fix kabi broken due to request_wrapper
- ide-cd: don't clear rq_flags after blk_get_request
- iommu: Fix error handling in probe_acpi_namespace_devices()
- !322 [sync] PR-321: net: hns3: fix the HCLGE_OPC_WOL_CFG opcode id for wol and fix the incorrect way to obtain parameters.
- !320 Some bugfix about rx packet,rx copybreak and phy link ksettings for the HNS3.
- net: hns3: fix the HCLGE_OPC_WOL_CFG opcode id for wol
- net: hns3: fix getting supported parameter from driver in hclge_set_wol
- net: hns3: fix setting incorrect phy link ksettings for firmware in resetting process
- net: hns3: fix return value check bug of rx copybreak
- net: hns3: fix incorrect hw rss hash type of rx packet</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.3.0.77" date="1670932800">- !326 vdpa: Add the vdpa device management mechanism and optimize the iotlb
- Revert "ipvlan: Modify the value of ipvlan modes"
- net/af_packet: make sure to pull mac header
- KVM: arm64: Fix {fp_asimd,sve}_exit_stat manipulation
- dm thin: Fix ABBA deadlock between shrink_slab and dm_pool_abort_metadata
- arm64: fix a concurrency issue in emulation_proc_handler()
- vdpa/vp_vdpa: fix kfree a wrong pointer in vp_vdpa_remove
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vhost-vdpa: call vhost_vdpa_cleanup during the release
- vhost: allow batching hint without size
- vdpa_sim: set vringh notify callback
- virtio_pci: struct virtio_pci_common_cfg add queue_reset
- virtio_pci: struct virtio_pci_common_cfg add queue_notify_data
- virtio: use virtio_reset_device() when possible
- virtio: document virtio_reset_device
- virtio: wrap config-&gt;reset calls
- virtio_pci: introduce helper to get/set queue reset
- virtio_pci: extract the logic of active vq for modern pci
- vhost-vdpa: uAPI to suspend the device
- vhost-vdpa: introduce SUSPEND backend feature bit
- vdpa: Add suspend operation
- vhost-vdpa: Call ida_simple_remove() when failed
- vDPA: fix 'cast to restricted le16' warnings in vdpa.c
- vDPA: !FEATURES_OK should not block querying device config space
- vdpa: make get_vq_group and set_group_asid optional
- vhost-vdpa: return -EFAULT on copy_to_user() failure
- vdpa/vp_vdpa : add vdpa tool support in vp_vdpa
- vhost-vdpa: support ASID based IOTLB API
- vhost-vdpa: introduce uAPI to set group ASID
- vhost-vdpa: uAPI to get virtqueue group id
- vhost-vdpa: introduce uAPI to get the number of address spaces
- vhost-vdpa: introduce uAPI to get the number of virtqueue groups
- vhost-vdpa: introduce asid based IOTLB
- vhost: support ASID in IOTLB API
- vhost_iotlb: split out IOTLB initialization
- vdpa: introduce config operations for associating ASID to a virtqueue group
- vdpa: multiple address spaces support
- vdpa: introduce virtqueue groups
- vhost-vdpa: switch to use vhost-vdpa specific IOTLB
- vhost-vdpa: passing iotlb to IOMMU mapping helpers
- virtio-vdpa: don't set callback if virtio doesn't need it
- vhost: move the backend feature bits to vhost_types.h
- net/vdpa: Use readers/writers semaphore instead of cf_mutex
- net/vdpa: Use readers/writers semaphore instead of vdpa_dev_mutex
- vdpa: Add support for querying vendor statistics
- vdpa: Fix error logic in vdpa_nl_cmd_dev_get_doit
- vhost: handle error while adding split ranges to iotlb
- vdpa: change the type of nvqs to u32
- vhost: fix hung thread due to erroneous iotlb entries
- vdpa: factor out vdpa_set_features_unlocked for vdpa internal use
- vdpa: Protect vdpa reset with cf_mutex
- vdpa: Avoid taking cf_mutex lock on get status
- vdpa: Use BIT_ULL for bit operations
- vdpa: Support reporting max device capabilities
- vdpa: Add support for returning device configuration information
- vdpa: Allow to configure max data virtqueues
- vdpa: Read device configuration only if FEATURES_OK
- vdpa: Sync calls set/get config/status with cf_mutex
- vdpa: Provide interface to read driver features
- vdpa: Mark vdpa_config_ops.get_vq_notification as optional
- vdpa: Avoid duplicate call to vp_vdpa get_status
- docs: document sysfs ABI for vDPA bus
- vhost-vdpa: clean irqs before reseting vdpa device
- vdpa: Enable user to set mac and mtu of vdpa device
- vdpa: Use kernel coding style for structure comments
- vdpa: Introduce query of device config layout
- vdpa: Introduce and use vdpa device get, set config helpers
- vdpa: add new attribute VDPA_ATTR_DEV_MIN_VQ_SIZE
- virtio_vdpa: setup correct vq size with callbacks get_vq_num_{max,min}
- vdpa: min vq num of vdpa device cannot be greater than max vq num
- vdpa: add new callback get_vq_num_min in vdpa_config_ops
- vhost_vdpa: unset vq irq before freeing irq
- vdpa: potential uninitialized return in vhost_vdpa_va_map()
- vhost-iotlb: Add an opaque pointer for vhost IOTLB
- vdpa: Support transferring virtual addressing during DMA mapping
- vdpa: factor out vhost_vdpa_pa_map() and vhost_vdpa_pa_unmap()
- vdpa: Add an opaque pointer for vdpa_config_ops.dma_map()
- vhost-vdpa: Handle the failure of vdpa_reset()
- vdpa: Fix some coding style issues
- vdpa: Make use of PFN_PHYS/PFN_UP/PFN_DOWN helper macro
- vdpa: Add documentation for vdpa_alloc_device() macro
- virtio/vdpa: clear the virtqueue state during probe
- vp_vdpa: correct the return value when fail to map notification
- virito_pci libray: hide vp_modern_map_capability()
- vhost/vdpa: Remove the restriction that only supports virtio-net devices
- virtio_pci_modern: hide vp_modern_get_queue_notify_off()
- vdpa: Follow kdoc comment style
- vdpa: Follow kdoc comment style
- virtio_vdpa: don't warn when fail to disable vq
- vdpa: Use simpler version of ida allocation
- vhost_vdpa: switch to vmemdup_user()</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.4.0.78" date="1671105600">- RDMA/hns: fix the error of RoCE VF based on RoCE Bonding PF
- RDMA/hns: Fix AH attr queried by query_qp
- RDMA/hns: Kernel notify usr space to stop ring db</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 5.10.0-136.4.0.79" date="1671364800">- Process PGP certs before kernel building</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.8.0.80" date="1671451200">- Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del()
- Bluetooth: L2CAP: Fix build errors in some archs
- cpuidle: add cpuidle-haltpoll driver module parameter
- clk: imx: Add check for kcalloc
- x86/cpu/hygon: Set __max_die_per_package on Hygon
- mm/dynamic_hugetlb: fix clear PagePool without lock protection
- mm/dynamic_hugetlb: fix list corruption in hpool_merge_page()
- mm/swapfile: use new way to fix broken kabi in swap_info_struct
- block: always align request_wrapper to cacheline
- block: fix crash on cmpxchg for request_wrapper
- efi/libstub: Fix build error in efi-stub.c for riscv
- mm: init: Fix build waring for ascend enable features
- mtd: physmap-core: Fix NULL pointer dereferencing in of_select_probe_type()
- ACPI: APEI: Fix _EINJ vs EFI_MEMORY_SP
- xen/netback: fix build warning
- xen/netback: Ensure protocol headers don't fall in the non-linear area
- block: only use cmpxchg64 in 64bit platform
- proc: proc_skip_spaces() shouldn't think it is working on C strings
- proc: avoid integer type confusion in get_proc_long
- sched/qos: Don't unthrottle cfs_rq when cfs_rq is throttled by qos</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.10.0.82" date="1671796800">- scsi: iscsi: remove .unbind_conn from iscsi_transport
- Revert "scsi: iscsi: fix kabi broken in struct iscsi_transport"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.0.86" date="1672056000">- timekeeping: Adding a padding before timekeeper in tk_core</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
</package>
<package pkgid="16a7b8a130cb8ca8ca845cbb9dd98f0ad3d172e5c669614c37e61e694e84f0fc" name="kernel" arch="src">
  <version epoch="0" ver="5.10.0" rel="136.15.0.91.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.3.0.77" date="1670932800">- !326 vdpa: Add the vdpa device management mechanism and optimize the iotlb
- Revert "ipvlan: Modify the value of ipvlan modes"
- net/af_packet: make sure to pull mac header
- KVM: arm64: Fix {fp_asimd,sve}_exit_stat manipulation
- dm thin: Fix ABBA deadlock between shrink_slab and dm_pool_abort_metadata
- arm64: fix a concurrency issue in emulation_proc_handler()
- vdpa/vp_vdpa: fix kfree a wrong pointer in vp_vdpa_remove
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vhost-vdpa: call vhost_vdpa_cleanup during the release
- vhost: allow batching hint without size
- vdpa_sim: set vringh notify callback
- virtio_pci: struct virtio_pci_common_cfg add queue_reset
- virtio_pci: struct virtio_pci_common_cfg add queue_notify_data
- virtio: use virtio_reset_device() when possible
- virtio: document virtio_reset_device
- virtio: wrap config-&gt;reset calls
- virtio_pci: introduce helper to get/set queue reset
- virtio_pci: extract the logic of active vq for modern pci
- vhost-vdpa: uAPI to suspend the device
- vhost-vdpa: introduce SUSPEND backend feature bit
- vdpa: Add suspend operation
- vhost-vdpa: Call ida_simple_remove() when failed
- vDPA: fix 'cast to restricted le16' warnings in vdpa.c
- vDPA: !FEATURES_OK should not block querying device config space
- vdpa: make get_vq_group and set_group_asid optional
- vhost-vdpa: return -EFAULT on copy_to_user() failure
- vdpa/vp_vdpa : add vdpa tool support in vp_vdpa
- vhost-vdpa: support ASID based IOTLB API
- vhost-vdpa: introduce uAPI to set group ASID
- vhost-vdpa: uAPI to get virtqueue group id
- vhost-vdpa: introduce uAPI to get the number of address spaces
- vhost-vdpa: introduce uAPI to get the number of virtqueue groups
- vhost-vdpa: introduce asid based IOTLB
- vhost: support ASID in IOTLB API
- vhost_iotlb: split out IOTLB initialization
- vdpa: introduce config operations for associating ASID to a virtqueue group
- vdpa: multiple address spaces support
- vdpa: introduce virtqueue groups
- vhost-vdpa: switch to use vhost-vdpa specific IOTLB
- vhost-vdpa: passing iotlb to IOMMU mapping helpers
- virtio-vdpa: don't set callback if virtio doesn't need it
- vhost: move the backend feature bits to vhost_types.h
- net/vdpa: Use readers/writers semaphore instead of cf_mutex
- net/vdpa: Use readers/writers semaphore instead of vdpa_dev_mutex
- vdpa: Add support for querying vendor statistics
- vdpa: Fix error logic in vdpa_nl_cmd_dev_get_doit
- vhost: handle error while adding split ranges to iotlb
- vdpa: change the type of nvqs to u32
- vhost: fix hung thread due to erroneous iotlb entries
- vdpa: factor out vdpa_set_features_unlocked for vdpa internal use
- vdpa: Protect vdpa reset with cf_mutex
- vdpa: Avoid taking cf_mutex lock on get status
- vdpa: Use BIT_ULL for bit operations
- vdpa: Support reporting max device capabilities
- vdpa: Add support for returning device configuration information
- vdpa: Allow to configure max data virtqueues
- vdpa: Read device configuration only if FEATURES_OK
- vdpa: Sync calls set/get config/status with cf_mutex
- vdpa: Provide interface to read driver features
- vdpa: Mark vdpa_config_ops.get_vq_notification as optional
- vdpa: Avoid duplicate call to vp_vdpa get_status
- docs: document sysfs ABI for vDPA bus
- vhost-vdpa: clean irqs before reseting vdpa device
- vdpa: Enable user to set mac and mtu of vdpa device
- vdpa: Use kernel coding style for structure comments
- vdpa: Introduce query of device config layout
- vdpa: Introduce and use vdpa device get, set config helpers
- vdpa: add new attribute VDPA_ATTR_DEV_MIN_VQ_SIZE
- virtio_vdpa: setup correct vq size with callbacks get_vq_num_{max,min}
- vdpa: min vq num of vdpa device cannot be greater than max vq num
- vdpa: add new callback get_vq_num_min in vdpa_config_ops
- vhost_vdpa: unset vq irq before freeing irq
- vdpa: potential uninitialized return in vhost_vdpa_va_map()
- vhost-iotlb: Add an opaque pointer for vhost IOTLB
- vdpa: Support transferring virtual addressing during DMA mapping
- vdpa: factor out vhost_vdpa_pa_map() and vhost_vdpa_pa_unmap()
- vdpa: Add an opaque pointer for vdpa_config_ops.dma_map()
- vhost-vdpa: Handle the failure of vdpa_reset()
- vdpa: Fix some coding style issues
- vdpa: Make use of PFN_PHYS/PFN_UP/PFN_DOWN helper macro
- vdpa: Add documentation for vdpa_alloc_device() macro
- virtio/vdpa: clear the virtqueue state during probe
- vp_vdpa: correct the return value when fail to map notification
- virito_pci libray: hide vp_modern_map_capability()
- vhost/vdpa: Remove the restriction that only supports virtio-net devices
- virtio_pci_modern: hide vp_modern_get_queue_notify_off()
- vdpa: Follow kdoc comment style
- vdpa: Follow kdoc comment style
- virtio_vdpa: don't warn when fail to disable vq
- vdpa: Use simpler version of ida allocation
- vhost_vdpa: switch to vmemdup_user()</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.4.0.78" date="1671105600">- RDMA/hns: fix the error of RoCE VF based on RoCE Bonding PF
- RDMA/hns: Fix AH attr queried by query_qp
- RDMA/hns: Kernel notify usr space to stop ring db</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 5.10.0-136.4.0.79" date="1671364800">- Process PGP certs before kernel building</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.8.0.80" date="1671451200">- Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del()
- Bluetooth: L2CAP: Fix build errors in some archs
- cpuidle: add cpuidle-haltpoll driver module parameter
- clk: imx: Add check for kcalloc
- x86/cpu/hygon: Set __max_die_per_package on Hygon
- mm/dynamic_hugetlb: fix clear PagePool without lock protection
- mm/dynamic_hugetlb: fix list corruption in hpool_merge_page()
- mm/swapfile: use new way to fix broken kabi in swap_info_struct
- block: always align request_wrapper to cacheline
- block: fix crash on cmpxchg for request_wrapper
- efi/libstub: Fix build error in efi-stub.c for riscv
- mm: init: Fix build waring for ascend enable features
- mtd: physmap-core: Fix NULL pointer dereferencing in of_select_probe_type()
- ACPI: APEI: Fix _EINJ vs EFI_MEMORY_SP
- xen/netback: fix build warning
- xen/netback: Ensure protocol headers don't fall in the non-linear area
- block: only use cmpxchg64 in 64bit platform
- proc: proc_skip_spaces() shouldn't think it is working on C strings
- proc: avoid integer type confusion in get_proc_long
- sched/qos: Don't unthrottle cfs_rq when cfs_rq is throttled by qos</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.10.0.82" date="1671796800">- scsi: iscsi: remove .unbind_conn from iscsi_transport
- Revert "scsi: iscsi: fix kabi broken in struct iscsi_transport"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.0.86" date="1672056000">- timekeeping: Adding a padding before timekeeper in tk_core</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
</package>
<package pkgid="44b2e0a149d4b5085ce8cd43c130f035a0151c217c65fc6ff0adad1878bcf0e8" name="kernel" arch="src">
  <version epoch="0" ver="5.10.0" rel="136.16.0.92.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.4.0.78" date="1671105600">- RDMA/hns: fix the error of RoCE VF based on RoCE Bonding PF
- RDMA/hns: Fix AH attr queried by query_qp
- RDMA/hns: Kernel notify usr space to stop ring db</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 5.10.0-136.4.0.79" date="1671364800">- Process PGP certs before kernel building</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.8.0.80" date="1671451200">- Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del()
- Bluetooth: L2CAP: Fix build errors in some archs
- cpuidle: add cpuidle-haltpoll driver module parameter
- clk: imx: Add check for kcalloc
- x86/cpu/hygon: Set __max_die_per_package on Hygon
- mm/dynamic_hugetlb: fix clear PagePool without lock protection
- mm/dynamic_hugetlb: fix list corruption in hpool_merge_page()
- mm/swapfile: use new way to fix broken kabi in swap_info_struct
- block: always align request_wrapper to cacheline
- block: fix crash on cmpxchg for request_wrapper
- efi/libstub: Fix build error in efi-stub.c for riscv
- mm: init: Fix build waring for ascend enable features
- mtd: physmap-core: Fix NULL pointer dereferencing in of_select_probe_type()
- ACPI: APEI: Fix _EINJ vs EFI_MEMORY_SP
- xen/netback: fix build warning
- xen/netback: Ensure protocol headers don't fall in the non-linear area
- block: only use cmpxchg64 in 64bit platform
- proc: proc_skip_spaces() shouldn't think it is working on C strings
- proc: avoid integer type confusion in get_proc_long
- sched/qos: Don't unthrottle cfs_rq when cfs_rq is throttled by qos</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.10.0.82" date="1671796800">- scsi: iscsi: remove .unbind_conn from iscsi_transport
- Revert "scsi: iscsi: fix kabi broken in struct iscsi_transport"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.0.86" date="1672056000">- timekeeping: Adding a padding before timekeeper in tk_core</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
</package>
<package pkgid="b4fdc2584dc0e11cedd826dd9b7de4397375ac6ec98bc95594138383b6a3c316" name="kernel" arch="src">
  <version epoch="0" ver="5.10.0" rel="136.17.0.93.oe2203sp1"/>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 5.10.0-136.4.0.79" date="1671364800">- Process PGP certs before kernel building</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.8.0.80" date="1671451200">- Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del()
- Bluetooth: L2CAP: Fix build errors in some archs
- cpuidle: add cpuidle-haltpoll driver module parameter
- clk: imx: Add check for kcalloc
- x86/cpu/hygon: Set __max_die_per_package on Hygon
- mm/dynamic_hugetlb: fix clear PagePool without lock protection
- mm/dynamic_hugetlb: fix list corruption in hpool_merge_page()
- mm/swapfile: use new way to fix broken kabi in swap_info_struct
- block: always align request_wrapper to cacheline
- block: fix crash on cmpxchg for request_wrapper
- efi/libstub: Fix build error in efi-stub.c for riscv
- mm: init: Fix build waring for ascend enable features
- mtd: physmap-core: Fix NULL pointer dereferencing in of_select_probe_type()
- ACPI: APEI: Fix _EINJ vs EFI_MEMORY_SP
- xen/netback: fix build warning
- xen/netback: Ensure protocol headers don't fall in the non-linear area
- block: only use cmpxchg64 in 64bit platform
- proc: proc_skip_spaces() shouldn't think it is working on C strings
- proc: avoid integer type confusion in get_proc_long
- sched/qos: Don't unthrottle cfs_rq when cfs_rq is throttled by qos</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.10.0.82" date="1671796800">- scsi: iscsi: remove .unbind_conn from iscsi_transport
- Revert "scsi: iscsi: fix kabi broken in struct iscsi_transport"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.0.86" date="1672056000">- timekeeping: Adding a padding before timekeeper in tk_core</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
</package>
<package pkgid="2b5b7518c38eae58b37a4460906851f940e81febecdaaf901f19c826dc15a014" name="kernel" arch="src">
  <version epoch="0" ver="5.10.0" rel="136.19.0.95.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.10.0.82" date="1671796800">- scsi: iscsi: remove .unbind_conn from iscsi_transport
- Revert "scsi: iscsi: fix kabi broken in struct iscsi_transport"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.0.86" date="1672056000">- timekeeping: Adding a padding before timekeeper in tk_core</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
</package>
<package pkgid="5bc687f2d7b02aa0d459a390ecfb6afe18556e843750adbe6f43e2c0de23137b" name="kernel" arch="src">
  <version epoch="0" ver="5.10.0" rel="136.20.0.96.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.0.86" date="1672056000">- timekeeping: Adding a padding before timekeeper in tk_core</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
</package>
<package pkgid="4970cded0ba290b40435cd20cdcb767f57b3bb46b6c4cf0d11bf0ccbea07de57" name="kernel" arch="src">
  <version epoch="0" ver="5.10.0" rel="136.21.0.97.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
</package>
<package pkgid="9047202c002adb8c8177b41ffd794c887b2abf67572995a2d7f4d36273038cd9" name="kernel" arch="src">
  <version epoch="0" ver="5.10.0" rel="136.22.0.98.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
</package>
<package pkgid="31cbc2789b98c30dd42214fd487e3bc5fca23f663e9a6e060367addf735b455a" name="kernel" arch="src">
  <version epoch="0" ver="5.10.0" rel="136.24.0.100.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
</package>
<package pkgid="b0d4e62585f0b065da81a90722c48fcac7bc695157af06a9522626b0c2e2a1d5" name="kernel" arch="src">
  <version epoch="0" ver="5.10.0" rel="136.26.0.102.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
</package>
<package pkgid="9a20ab7b88e3e1bcd6ff981235195e0737f89ec5ceebe7ff225f0650c5fb188d" name="kernel" arch="src">
  <version epoch="0" ver="5.10.0" rel="136.27.0.103.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
</package>
<package pkgid="89934b713cac6638c15d6b60a417be85392775718a0c1a41efd0032d21635334" name="kernel" arch="src">
  <version epoch="0" ver="5.10.0" rel="136.28.0.104.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
</package>
<package pkgid="3aa9d20b2770311d925281a15defa94fbc0516e45c929625a12eb17885b6768b" name="kernel" arch="src">
  <version epoch="0" ver="5.10.0" rel="136.29.0.105.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
</package>
<package pkgid="3b0a0b11283450e5f2307ff6b7446c56efbd2880da9a450e1b0618c8de0d46da" name="kernel" arch="src">
  <version epoch="0" ver="5.10.0" rel="136.30.0.106.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
</package>
<package pkgid="a442614c722705ea1f2ed7e8c7678654c7184266868a2191e29b52c13c347993" name="kernel" arch="src">
  <version epoch="0" ver="5.10.0" rel="136.31.0.107.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
</package>
<package pkgid="068307a4fa454c2f1891e71d080a443ba7a38e81dc9b6eeab890693bdf704b1c" name="kernel" arch="src">
  <version epoch="0" ver="5.10.0" rel="136.32.0.108.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
</package>
<package pkgid="be8b50f1180c5be8a15812907cf5b6ad376bee2b324a8af0a191f940abdebbee" name="kernel" arch="src">
  <version epoch="0" ver="5.10.0" rel="136.33.0.109.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
</package>
<package pkgid="b07594decc125e7ac73632fcd3af95de3bd815c32cec658a3e68dd9e23c10360" name="kernel" arch="src">
  <version epoch="0" ver="5.10.0" rel="136.34.0.110.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
</package>
<package pkgid="ce9f9191a54e3d7e491869af6e6d7de37e5ffe53dcb686f1836238ed25d8dba8" name="kernel" arch="src">
  <version epoch="0" ver="5.10.0" rel="136.35.0.111.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
</package>
<package pkgid="ac9a05c2bb4f96d785707760250474ea240dc138f15deec0805c38a4b4049848" name="kernel" arch="src">
  <version epoch="0" ver="5.10.0" rel="136.36.0.112.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
</package>
<package pkgid="04e713443407f154a5ca39b26bdaad27e46a0ab4d4206c3c10378cf3e4375b82" name="kernel" arch="src">
  <version epoch="0" ver="5.10.0" rel="136.37.0.113.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
</package>
<package pkgid="50eae89af2eb6ea2ac0f2417c408f2a8823410cd8b19643b18deb47ec65a0e8d" name="kernel" arch="src">
  <version epoch="0" ver="5.10.0" rel="136.38.0.114.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
</package>
<package pkgid="a403576d67aa1e47c339dacf0238b46c095c9916c05fcf35bb1325f5f11ce620" name="kernel" arch="src">
  <version epoch="0" ver="5.10.0" rel="136.39.0.116.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
</package>
<package pkgid="fbaa1979668d47ca91fcf2e2875e222620fa0d171242ea2934cc26994c629aa1" name="kernel" arch="src">
  <version epoch="0" ver="5.10.0" rel="136.40.0.117.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
</package>
<package pkgid="091b273e32765ea003d7ee883b7ef0e393ad11ccb98a57f0061a731952c7e31d" name="kernel" arch="src">
  <version epoch="0" ver="5.10.0" rel="136.41.0.119.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
</package>
<package pkgid="9c88f9f594d14dfab4745fe1046d7bc516d7046eedebba1e6b4f2962511378c6" name="kernel" arch="src">
  <version epoch="0" ver="5.10.0" rel="136.42.0.120.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
</package>
<package pkgid="dc69ddab1426a2f31a212f7344a7410f17bcc0e6698a203b79866f82967eff9a" name="kernel" arch="src">
  <version epoch="0" ver="5.10.0" rel="136.43.0.121.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
</package>
<package pkgid="60ba74d7797c15e154e06aa24fcc7b3a7531ba3b18dd5e498208102a5e1d4cb4" name="kernel" arch="src">
  <version epoch="0" ver="5.10.0" rel="136.44.0.122.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
</package>
<package pkgid="15969c98cca371ecf3552e17997f4abd39c8d30be472b80cedd0fb4a602f00a3" name="kernel" arch="src">
  <version epoch="0" ver="5.10.0" rel="136.45.0.123.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
</package>
<package pkgid="0ae79ec3b60db6c4ab8be00fcef363a918db890ed77004e3f1198bcb0efd1df2" name="kernel" arch="src">
  <version epoch="0" ver="5.10.0" rel="136.46.0.124.oe2203sp1"/>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
</package>
<package pkgid="939af3f9fe06e036a0adb5de886912c231a3fd0e8ca743b3150b4e1356d1ed10" name="kernel" arch="src">
  <version epoch="0" ver="5.10.0" rel="136.47.0.125.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
</package>
<package pkgid="70707082a1b5293cf5daefe31782b1a1f75dd660b99117a9e4cc061457deee94" name="kernel" arch="src">
  <version epoch="0" ver="5.10.0" rel="136.48.0.126.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
</package>
<package pkgid="0df3efe9d71c599ad298023b4dc605e1680bccd2b47711e42d373b94e2827025" name="kernel" arch="src">
  <version epoch="0" ver="5.10.0" rel="136.49.0.127.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
</package>
<package pkgid="e8e88ba1ae57cd013bc19dbb74db8201b8cfe9e6dd499db9cabd100b2c60915a" name="kernel" arch="src">
  <version epoch="0" ver="5.10.0" rel="136.50.0.129.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
</package>
<package pkgid="374d7a9f5575d0f693cdd70d3ac8e2f43f3f3cf5e4595e6894be3b5db5c10dc6" name="kernel" arch="src">
  <version epoch="0" ver="5.10.0" rel="136.51.0.130.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
</package>
<package pkgid="f0d3d765d5b75f0955ee00504475b65e01efd96467df412ec90fd172dc6888d4" name="kernel" arch="src">
  <version epoch="0" ver="5.10.0" rel="136.52.0.131.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
</package>
<package pkgid="70b4456cbf47133da5a13a0f9498e65934a82081458ca8a04c3dfb9c856847e3" name="kernel" arch="src">
  <version epoch="0" ver="5.10.0" rel="136.53.0.132.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
</package>
<package pkgid="fcf5fb4c9aeea40041288bf70f269792a9b61e0388f12792d960958898a2465a" name="kernel" arch="src">
  <version epoch="0" ver="5.10.0" rel="136.54.0.133.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
</package>
<package pkgid="c12168528f3a0954a1fc18c594ec3a237e1d7e681ff136475e8a4d5e7d8bef8a" name="kernel" arch="src">
  <version epoch="0" ver="5.10.0" rel="136.55.0.134.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
</package>
<package pkgid="a9820542c94ffa5d5d14f135a709fadce1e68b9371b9b4b63c21ebf2a61eb4dc" name="kernel" arch="src">
  <version epoch="0" ver="5.10.0" rel="136.56.0.135.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
</package>
<package pkgid="b9855145e224aa7145118e4a3ab1cb4469e8a9f7186632bcc4453317bc6307ba" name="kernel" arch="src">
  <version epoch="0" ver="5.10.0" rel="136.57.0.136.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
</package>
<package pkgid="820a2f6fedf464bf6dca5fd8a535bb1b3af2d702bab8fe184a1dfe58abc4cdbd" name="kernel" arch="src">
  <version epoch="0" ver="5.10.0" rel="136.58.0.137.oe2203sp1"/>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
</package>
<package pkgid="e549d922ab7d0dff546e12a5a9d939618d520727ae7383d068f7febf2b20c12c" name="kernel" arch="src">
  <version epoch="0" ver="5.10.0" rel="136.59.0.138.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
</package>
<package pkgid="42681162f9bd5fdcfcac4f91ecf952d2d4bdd01d30bfafff249d44ac39186ad5" name="kernel" arch="src">
  <version epoch="0" ver="5.10.0" rel="136.60.0.139.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
</package>
<package pkgid="649ef6379d53e0febb4ccf2cc3147fb89fe500db29057e2c2f2b18dfcd3099c9" name="kernel" arch="src">
  <version epoch="0" ver="5.10.0" rel="136.61.0.141.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
</package>
<package pkgid="1a31d023b8e4fe6621afd3a90ed496a78a032911f992a1a4fac712f4051bce80" name="kernel" arch="src">
  <version epoch="0" ver="5.10.0" rel="136.62.0.142.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
</package>
<package pkgid="76eb314a53f7a7802a0973194090c68db72e0db4dd3e511676bc324ebd636fbc" name="kernel" arch="src">
  <version epoch="0" ver="5.10.0" rel="136.63.0.143.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
</package>
<package pkgid="1c623bc0d9990b267733d5f6fb609f762f828f7b6388c0a433d4921110fbd7d2" name="kernel" arch="src">
  <version epoch="0" ver="5.10.0" rel="136.64.0.144.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
</package>
<package pkgid="e2f177b5bad19d30a57679e20d94ecc88a96b3aa0fb2048a97b9ae55f3f06b35" name="kernel" arch="src">
  <version epoch="0" ver="5.10.0" rel="136.65.0.145.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
</package>
<package pkgid="6c678cc4804603a28d517ddcf62c93922495d3eb181810143c7457a7590a90ea" name="kernel" arch="src">
  <version epoch="0" ver="5.10.0" rel="136.66.0.146.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
</package>
<package pkgid="b10c3777ae80a7c13183bea797ea0b98806a512dc168f92a54dbe6993a831f18" name="kernel" arch="src">
  <version epoch="0" ver="5.10.0" rel="136.67.0.147.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
</package>
<package pkgid="6349726138797a943e072a564692af211713a43fee265b35b3f4ded657e7267b" name="kernel" arch="src">
  <version epoch="0" ver="5.10.0" rel="136.68.0.148.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
</package>
<package pkgid="b7f3a5a096cf9e65e861081f10ba8723f3279cc5af0f8b2d3ee518ed640e9e4c" name="kernel" arch="src">
  <version epoch="0" ver="5.10.0" rel="136.69.0.149.oe2203sp1"/>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
</package>
<package pkgid="22b068d053e279d8ea824a1a440d912ee5fa479ff536472ce58bdeda8cf06240" name="kernel" arch="src">
  <version epoch="0" ver="5.10.0" rel="136.70.0.150.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
</package>
<package pkgid="deb6438b60aa599c0bc7daff929b1d79e110dcea366414407aee0c74924f6c6b" name="kernel" arch="src">
  <version epoch="0" ver="5.10.0" rel="136.71.0.151.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
</package>
<package pkgid="e20f613bdde766bbc3c57b9082a94b0f051a7fdb2383b01252e0d71ccf846ef7" name="kernel" arch="src">
  <version epoch="0" ver="5.10.0" rel="136.72.0.152.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
</package>
<package pkgid="bd976b0791c6b7307de90ac8faddbc115ea2c47fe35e22acb354a6fa682cfc4f" name="kernel" arch="src">
  <version epoch="0" ver="5.10.0" rel="136.73.0.153.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.73.0.153" date="1713960000">- !6414 [sync] PR-5510:  bus: mhi: host: Drop chan lock before queuing buffers
- !6143 [sync] PR-6103:  riscv: Sparse-Memory/vmemmap out-of-bounds fix
- !6535 [sync] PR-5222:  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6538 [sync] PR-5273:  net/smc: fix illegal rmb_desc access in SMC-D connection dump
- !6529 [sync] PR-5468:  media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- !6298  sp1 fix deadlock in cgroup1_writeback
- !6497 [sync] PR-6407:  wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- net/smc: fix illegal rmb_desc access in SMC-D connection dump
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6506 [sync] PR-5773:  patches for CVE-2023-52617
- !6502 [sync] PR-5772:  firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6518  Fix CVE-2023-52498
- media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- PM: sleep: Fix error handling in dpm_prepare()
- PM: sleep: Fix possible deadlocks in core system-wide PM code
- PM: core: Remove unnecessary (void *) conversions
- PM: sleep: Avoid calling put_device() under dpm_list_mtx
- PM: sleep: Use dev_printk() when possible
- async: Introduce async_schedule_dev_nocall()
- async: Split async_schedule_node_domain()
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
- firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6488 [sync] PR-6455:  CVE-2021-47182
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- !6433 [sync] PR-6312:  fix CVE-2024-24861 for 5.10
- scsi: core: Fix scsi_mode_sense() buffer length handling
- scsi: core: Reshuffle response handling in scsi_mode_sense()
- media: xc4000: Fix atomicity violation in xc4000_get_frequency
- !6411 [sync] PR-5195:  dmaengine: fix NULL pointer in channel unregistration function
- bus: mhi: host: Drop chan lock before queuing buffers
- dmaengine: fix NULL pointer in channel unregistration function
- cgroup_writeback: fix softlockup for blkcg-&gt;memcg_list
- cgroup_writeback: fix deadlock in cgroup1_writeback
- !6081  Fix CVE-2024-26764
- !5967  Fix CVE-2023-52441 and integrate the pre-patch
- riscv: Sparse-Memory/vmemmap out-of-bounds fix
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- ksmbd: fix out of bounds in init_smb2_rsp_hdr()
- ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- ksmbd: return unsupported error on smb1 mount
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect</changelog>
</package>
<package pkgid="f168803976ba9371f8279194323a29f9ea8da132c823a6501deea572e77600a1" name="kernel" arch="src">
  <version epoch="0" ver="5.10.0" rel="136.74.0.154.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.73.0.153" date="1713960000">- !6414 [sync] PR-5510:  bus: mhi: host: Drop chan lock before queuing buffers
- !6143 [sync] PR-6103:  riscv: Sparse-Memory/vmemmap out-of-bounds fix
- !6535 [sync] PR-5222:  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6538 [sync] PR-5273:  net/smc: fix illegal rmb_desc access in SMC-D connection dump
- !6529 [sync] PR-5468:  media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- !6298  sp1 fix deadlock in cgroup1_writeback
- !6497 [sync] PR-6407:  wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- net/smc: fix illegal rmb_desc access in SMC-D connection dump
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6506 [sync] PR-5773:  patches for CVE-2023-52617
- !6502 [sync] PR-5772:  firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6518  Fix CVE-2023-52498
- media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- PM: sleep: Fix error handling in dpm_prepare()
- PM: sleep: Fix possible deadlocks in core system-wide PM code
- PM: core: Remove unnecessary (void *) conversions
- PM: sleep: Avoid calling put_device() under dpm_list_mtx
- PM: sleep: Use dev_printk() when possible
- async: Introduce async_schedule_dev_nocall()
- async: Split async_schedule_node_domain()
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
- firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6488 [sync] PR-6455:  CVE-2021-47182
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- !6433 [sync] PR-6312:  fix CVE-2024-24861 for 5.10
- scsi: core: Fix scsi_mode_sense() buffer length handling
- scsi: core: Reshuffle response handling in scsi_mode_sense()
- media: xc4000: Fix atomicity violation in xc4000_get_frequency
- !6411 [sync] PR-5195:  dmaengine: fix NULL pointer in channel unregistration function
- bus: mhi: host: Drop chan lock before queuing buffers
- dmaengine: fix NULL pointer in channel unregistration function
- cgroup_writeback: fix softlockup for blkcg-&gt;memcg_list
- cgroup_writeback: fix deadlock in cgroup1_writeback
- !6081  Fix CVE-2024-26764
- !5967  Fix CVE-2023-52441 and integrate the pre-patch
- riscv: Sparse-Memory/vmemmap out-of-bounds fix
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- ksmbd: fix out of bounds in init_smb2_rsp_hdr()
- ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- ksmbd: return unsupported error on smb1 mount
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.74.0.154" date="1715169600">- !6426 [sync] PR-6291:  aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- !6902  bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- !6920  bpf: Fix hashtab overflow check on 32-bit arches
- !6926  firmware: arm_scmi: Harden accesses to the reset domains
- !6922  bpf: Fix stackmap overflow check on 32-bit arches
- !6864 [sync] PR-6835:  kprobes: Fix check for probe enabled in kill_kprobe()
- !6898 [sync] PR-6592:  net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- firmware: arm_scmi: Harden accesses to the reset domains
- bpf: Fix stackmap overflow check on 32-bit arches
- bpf: Fix hashtab overflow check on 32-bit arches
- bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- !6644 [sync] PR-6623:  amdkfd: use calloc instead of kzalloc to avoid integer overflow
- kprobes: Fix check for probe enabled in kill_kprobe()
- !6388 [sync] PR-6202:  ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- !6628 [sync] PR-6485:  CVE-2024-26843
- !6752 [sync] PR-6677: v3  olk-5.10: bugfix for mm
- mm/madvise: fix potential pte_unmap_unlock pte error
- mm/page_alloc: always attempt to allocate at least one page during bulk allocation
- !6505  cachefiles: fix memory leak in cachefiles_add_cache()
- !6687 [sync] PR-6580:  drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- !6637 [sync] PR-6561:  md: fix kmemleak of rdev-&gt;serial
- amdkfd: use calloc instead of kzalloc to avoid integer overflow
- !6598 [sync] PR-6584:  ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6607 [sync] PR-6579:  media: rc: bpf attach/detach requires write permission
- !6606 [sync] PR-6568:  IB/hfi1: Fix a memleak in init_credit_return
- !6614 [sync] PR-6543:  net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6603 [sync] PR-6520:  firmware: arm_scmi: Fix double free in SMC transport cleanup path
- md: fix kmemleak of rdev-&gt;serial
- firmware: arm_scmi: Fix double free in SMC transport cleanup path
- efi: runtime: Fix potential overflow of soft-reserved region size
- !6249  ubi: Check for too small LEB size in VTBL code
- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6449 [sync] PR-6281: v2  net/mlx5: Update error handler for UCTX and UMEM
- media: rc: bpf attach/detach requires write permission
- IB/hfi1: Fix a memleak in init_credit_return
- ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6476  do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- !6575 [sync] PR-6417:  media: pvrusb2: fix uaf in pvr2_context_set_notify
- media: pvrusb2: fix uaf in pvr2_context_set_notify
- cachefiles: fix memory leak in cachefiles_add_cache()
- do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- net/mlx5: Update error handler for UCTX and UMEM
- aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- ubi: Check for too small LEB size in VTBL code</changelog>
</package>
<package pkgid="7d0a89e08d4e1f20c9f6dd2d4a328b87f69dcdcc2171403cdfa24dda1cfd99f5" name="kernel" arch="src">
  <version epoch="0" ver="5.10.0" rel="136.75.0.155.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.73.0.153" date="1713960000">- !6414 [sync] PR-5510:  bus: mhi: host: Drop chan lock before queuing buffers
- !6143 [sync] PR-6103:  riscv: Sparse-Memory/vmemmap out-of-bounds fix
- !6535 [sync] PR-5222:  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6538 [sync] PR-5273:  net/smc: fix illegal rmb_desc access in SMC-D connection dump
- !6529 [sync] PR-5468:  media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- !6298  sp1 fix deadlock in cgroup1_writeback
- !6497 [sync] PR-6407:  wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- net/smc: fix illegal rmb_desc access in SMC-D connection dump
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6506 [sync] PR-5773:  patches for CVE-2023-52617
- !6502 [sync] PR-5772:  firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6518  Fix CVE-2023-52498
- media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- PM: sleep: Fix error handling in dpm_prepare()
- PM: sleep: Fix possible deadlocks in core system-wide PM code
- PM: core: Remove unnecessary (void *) conversions
- PM: sleep: Avoid calling put_device() under dpm_list_mtx
- PM: sleep: Use dev_printk() when possible
- async: Introduce async_schedule_dev_nocall()
- async: Split async_schedule_node_domain()
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
- firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6488 [sync] PR-6455:  CVE-2021-47182
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- !6433 [sync] PR-6312:  fix CVE-2024-24861 for 5.10
- scsi: core: Fix scsi_mode_sense() buffer length handling
- scsi: core: Reshuffle response handling in scsi_mode_sense()
- media: xc4000: Fix atomicity violation in xc4000_get_frequency
- !6411 [sync] PR-5195:  dmaengine: fix NULL pointer in channel unregistration function
- bus: mhi: host: Drop chan lock before queuing buffers
- dmaengine: fix NULL pointer in channel unregistration function
- cgroup_writeback: fix softlockup for blkcg-&gt;memcg_list
- cgroup_writeback: fix deadlock in cgroup1_writeback
- !6081  Fix CVE-2024-26764
- !5967  Fix CVE-2023-52441 and integrate the pre-patch
- riscv: Sparse-Memory/vmemmap out-of-bounds fix
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- ksmbd: fix out of bounds in init_smb2_rsp_hdr()
- ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- ksmbd: return unsupported error on smb1 mount
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.74.0.154" date="1715169600">- !6426 [sync] PR-6291:  aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- !6902  bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- !6920  bpf: Fix hashtab overflow check on 32-bit arches
- !6926  firmware: arm_scmi: Harden accesses to the reset domains
- !6922  bpf: Fix stackmap overflow check on 32-bit arches
- !6864 [sync] PR-6835:  kprobes: Fix check for probe enabled in kill_kprobe()
- !6898 [sync] PR-6592:  net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- firmware: arm_scmi: Harden accesses to the reset domains
- bpf: Fix stackmap overflow check on 32-bit arches
- bpf: Fix hashtab overflow check on 32-bit arches
- bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- !6644 [sync] PR-6623:  amdkfd: use calloc instead of kzalloc to avoid integer overflow
- kprobes: Fix check for probe enabled in kill_kprobe()
- !6388 [sync] PR-6202:  ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- !6628 [sync] PR-6485:  CVE-2024-26843
- !6752 [sync] PR-6677: v3  olk-5.10: bugfix for mm
- mm/madvise: fix potential pte_unmap_unlock pte error
- mm/page_alloc: always attempt to allocate at least one page during bulk allocation
- !6505  cachefiles: fix memory leak in cachefiles_add_cache()
- !6687 [sync] PR-6580:  drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- !6637 [sync] PR-6561:  md: fix kmemleak of rdev-&gt;serial
- amdkfd: use calloc instead of kzalloc to avoid integer overflow
- !6598 [sync] PR-6584:  ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6607 [sync] PR-6579:  media: rc: bpf attach/detach requires write permission
- !6606 [sync] PR-6568:  IB/hfi1: Fix a memleak in init_credit_return
- !6614 [sync] PR-6543:  net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6603 [sync] PR-6520:  firmware: arm_scmi: Fix double free in SMC transport cleanup path
- md: fix kmemleak of rdev-&gt;serial
- firmware: arm_scmi: Fix double free in SMC transport cleanup path
- efi: runtime: Fix potential overflow of soft-reserved region size
- !6249  ubi: Check for too small LEB size in VTBL code
- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6449 [sync] PR-6281: v2  net/mlx5: Update error handler for UCTX and UMEM
- media: rc: bpf attach/detach requires write permission
- IB/hfi1: Fix a memleak in init_credit_return
- ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6476  do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- !6575 [sync] PR-6417:  media: pvrusb2: fix uaf in pvr2_context_set_notify
- media: pvrusb2: fix uaf in pvr2_context_set_notify
- cachefiles: fix memory leak in cachefiles_add_cache()
- do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- net/mlx5: Update error handler for UCTX and UMEM
- aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- ubi: Check for too small LEB size in VTBL code</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.75.0.155" date="1715774400">- !6039 [sync] PR-6006:  fix CVE-2024-26669
- !5882 [sync] PR-5751:  net: atlantic: Fix DMA mapping for PTP hwts ring
- !7340  netfilter: nft_limit: reject configurations that cause integer overflow
- !7253  netfilter: nf_tables: disallow timeout for anonymous sets
- netfilter: nft_limit: reject configurations that cause integer overflow
- netfilter: nf_tables: disallow timeout for anonymous sets
- !7161 [sync] PR-6809:  memcg: fix possible use-after-free in memcg_write_event_control()
- !7121 [sync] PR-7086:  media: ttpci: fix two memleaks in budget_av_attach
- !7123 [sync] PR-7080:  drm: nv04: Fix out of bounds access
- !7145 [sync] PR-7044: v2  nfs: fix UAF in direct writes
- !7155 [sync] PR-7148:  scsi: sd: Fix sd_do_mode_sense() buffer length handling
- !7179  ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- !6978  ksmbd: validate payload size in ipc response
- !7098 [sync] PR-6818:  mm: memcg: fix stale protection of reclaim target memcg
- memcg: fix possible use-after-free in memcg_write_event_control()
- scsi: sd: Fix sd_do_mode_sense() buffer length handling
- nfs: fix UAF in direct writes
- !6764 [sync] PR-6680:  cifs: fix underflow in parse_server_interfaces()
- !6766 [sync] PR-6669:  NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- drm: nv04: Fix out of bounds access
- media: ttpci: fix two memleaks in budget_av_attach
- !7102 [sync] PR-7039:  USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7084 [sync] PR-7013:  media: edia: dvbdev: fix a use-after-free
- !7024 [sync] PR-6988:  clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- !6213 [sync] PR-6178:  CVE-2024-26812
- USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7009 [sync] PR-6959:  mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !7064 [sync] PR-7056:  scsi: qla2xxx: Fix command flush on cable pull
- mm: memcg: fix stale protection of reclaim target memcg
- !6946 [sync] PR-6840:  CVE-2023-52650
- media: edia: dvbdev: fix a use-after-free
- scsi: qla2xxx: Fix command flush on cable pull
- !6093 [sync] PR-5921:  ext4: fix double-free of blocks due to wrong extents moved_len
- !6090 [sync] PR-5977:  btrfs: dev-replace: properly validate device names
- !6096 [sync] PR-6029:  ceph: prevent use-after-free in encode_cap_msg()
- !7029 [sync] PR-6977:  wireguard: netlink: access device through ctx instead of peer
- drm/tegra: dsi: Add missing check for of_find_device_by_node
- wireguard: netlink: access device through ctx instead of peer
- !6986 [sync] PR-6964: v2  CVE-2024-27000
- clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !6691  quota: Fix potential NULL pointer dereference
- serial: core: fix kernel-doc for uart_port_unlock_irqrestore()
- serial: mxs-auart: add spinlock around changing cts state
- serial: core: Provide port lock wrappers
- !6885 [sync] PR-6740:  V2 cpuset: fix race between rebuild scheduler domains and hotplug work
- !6961 [sync] PR-6861:  media: dvb-frontends: avoid stack overflow warnings with clang
- ksmbd: validate payload size in ipc response
- !6912  pstore: inode: Only d_invalidate() is needed
- !6937 [sync] PR-6826:  fat: fix uninitialized field in nostale filehandles
- !6934 [sync] PR-6838:  fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- media: dvb-frontends: avoid stack overflow warnings with clang
- fat: fix uninitialized field in nostale filehandles
- fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- pstore: inode: Only d_invalidate() is needed
- cpuset: fix race between rebuild scheduler domains and hotplug work
- NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- cifs: fix underflow in parse_server_interfaces()
- quota: Fix potential NULL pointer dereference
- vfio/pci: Create persistent INTx handler
- vfio: Introduce interface to flush virqfd inject workqueue
- ceph: prevent use-after-free in encode_cap_msg()
- ext4: fix double-free of blocks due to wrong extents moved_len
- btrfs: dev-replace: properly validate device names
- net/sched: flower: Fix kabi change
- net/sched: flower: Fix chain template offload
- net: atlantic: Fix DMA mapping for PTP hwts ring</changelog>
</package>
<package pkgid="bf4c8d241735c02d35949a39231c73c0af7c2213fa919a99015933b4354e0d38" name="kernel" arch="src">
  <version epoch="0" ver="5.10.0" rel="136.76.0.156.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.73.0.153" date="1713960000">- !6414 [sync] PR-5510:  bus: mhi: host: Drop chan lock before queuing buffers
- !6143 [sync] PR-6103:  riscv: Sparse-Memory/vmemmap out-of-bounds fix
- !6535 [sync] PR-5222:  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6538 [sync] PR-5273:  net/smc: fix illegal rmb_desc access in SMC-D connection dump
- !6529 [sync] PR-5468:  media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- !6298  sp1 fix deadlock in cgroup1_writeback
- !6497 [sync] PR-6407:  wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- net/smc: fix illegal rmb_desc access in SMC-D connection dump
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6506 [sync] PR-5773:  patches for CVE-2023-52617
- !6502 [sync] PR-5772:  firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6518  Fix CVE-2023-52498
- media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- PM: sleep: Fix error handling in dpm_prepare()
- PM: sleep: Fix possible deadlocks in core system-wide PM code
- PM: core: Remove unnecessary (void *) conversions
- PM: sleep: Avoid calling put_device() under dpm_list_mtx
- PM: sleep: Use dev_printk() when possible
- async: Introduce async_schedule_dev_nocall()
- async: Split async_schedule_node_domain()
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
- firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6488 [sync] PR-6455:  CVE-2021-47182
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- !6433 [sync] PR-6312:  fix CVE-2024-24861 for 5.10
- scsi: core: Fix scsi_mode_sense() buffer length handling
- scsi: core: Reshuffle response handling in scsi_mode_sense()
- media: xc4000: Fix atomicity violation in xc4000_get_frequency
- !6411 [sync] PR-5195:  dmaengine: fix NULL pointer in channel unregistration function
- bus: mhi: host: Drop chan lock before queuing buffers
- dmaengine: fix NULL pointer in channel unregistration function
- cgroup_writeback: fix softlockup for blkcg-&gt;memcg_list
- cgroup_writeback: fix deadlock in cgroup1_writeback
- !6081  Fix CVE-2024-26764
- !5967  Fix CVE-2023-52441 and integrate the pre-patch
- riscv: Sparse-Memory/vmemmap out-of-bounds fix
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- ksmbd: fix out of bounds in init_smb2_rsp_hdr()
- ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- ksmbd: return unsupported error on smb1 mount
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.74.0.154" date="1715169600">- !6426 [sync] PR-6291:  aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- !6902  bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- !6920  bpf: Fix hashtab overflow check on 32-bit arches
- !6926  firmware: arm_scmi: Harden accesses to the reset domains
- !6922  bpf: Fix stackmap overflow check on 32-bit arches
- !6864 [sync] PR-6835:  kprobes: Fix check for probe enabled in kill_kprobe()
- !6898 [sync] PR-6592:  net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- firmware: arm_scmi: Harden accesses to the reset domains
- bpf: Fix stackmap overflow check on 32-bit arches
- bpf: Fix hashtab overflow check on 32-bit arches
- bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- !6644 [sync] PR-6623:  amdkfd: use calloc instead of kzalloc to avoid integer overflow
- kprobes: Fix check for probe enabled in kill_kprobe()
- !6388 [sync] PR-6202:  ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- !6628 [sync] PR-6485:  CVE-2024-26843
- !6752 [sync] PR-6677: v3  olk-5.10: bugfix for mm
- mm/madvise: fix potential pte_unmap_unlock pte error
- mm/page_alloc: always attempt to allocate at least one page during bulk allocation
- !6505  cachefiles: fix memory leak in cachefiles_add_cache()
- !6687 [sync] PR-6580:  drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- !6637 [sync] PR-6561:  md: fix kmemleak of rdev-&gt;serial
- amdkfd: use calloc instead of kzalloc to avoid integer overflow
- !6598 [sync] PR-6584:  ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6607 [sync] PR-6579:  media: rc: bpf attach/detach requires write permission
- !6606 [sync] PR-6568:  IB/hfi1: Fix a memleak in init_credit_return
- !6614 [sync] PR-6543:  net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6603 [sync] PR-6520:  firmware: arm_scmi: Fix double free in SMC transport cleanup path
- md: fix kmemleak of rdev-&gt;serial
- firmware: arm_scmi: Fix double free in SMC transport cleanup path
- efi: runtime: Fix potential overflow of soft-reserved region size
- !6249  ubi: Check for too small LEB size in VTBL code
- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6449 [sync] PR-6281: v2  net/mlx5: Update error handler for UCTX and UMEM
- media: rc: bpf attach/detach requires write permission
- IB/hfi1: Fix a memleak in init_credit_return
- ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6476  do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- !6575 [sync] PR-6417:  media: pvrusb2: fix uaf in pvr2_context_set_notify
- media: pvrusb2: fix uaf in pvr2_context_set_notify
- cachefiles: fix memory leak in cachefiles_add_cache()
- do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- net/mlx5: Update error handler for UCTX and UMEM
- aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- ubi: Check for too small LEB size in VTBL code</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.75.0.155" date="1715774400">- !6039 [sync] PR-6006:  fix CVE-2024-26669
- !5882 [sync] PR-5751:  net: atlantic: Fix DMA mapping for PTP hwts ring
- !7340  netfilter: nft_limit: reject configurations that cause integer overflow
- !7253  netfilter: nf_tables: disallow timeout for anonymous sets
- netfilter: nft_limit: reject configurations that cause integer overflow
- netfilter: nf_tables: disallow timeout for anonymous sets
- !7161 [sync] PR-6809:  memcg: fix possible use-after-free in memcg_write_event_control()
- !7121 [sync] PR-7086:  media: ttpci: fix two memleaks in budget_av_attach
- !7123 [sync] PR-7080:  drm: nv04: Fix out of bounds access
- !7145 [sync] PR-7044: v2  nfs: fix UAF in direct writes
- !7155 [sync] PR-7148:  scsi: sd: Fix sd_do_mode_sense() buffer length handling
- !7179  ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- !6978  ksmbd: validate payload size in ipc response
- !7098 [sync] PR-6818:  mm: memcg: fix stale protection of reclaim target memcg
- memcg: fix possible use-after-free in memcg_write_event_control()
- scsi: sd: Fix sd_do_mode_sense() buffer length handling
- nfs: fix UAF in direct writes
- !6764 [sync] PR-6680:  cifs: fix underflow in parse_server_interfaces()
- !6766 [sync] PR-6669:  NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- drm: nv04: Fix out of bounds access
- media: ttpci: fix two memleaks in budget_av_attach
- !7102 [sync] PR-7039:  USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7084 [sync] PR-7013:  media: edia: dvbdev: fix a use-after-free
- !7024 [sync] PR-6988:  clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- !6213 [sync] PR-6178:  CVE-2024-26812
- USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7009 [sync] PR-6959:  mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !7064 [sync] PR-7056:  scsi: qla2xxx: Fix command flush on cable pull
- mm: memcg: fix stale protection of reclaim target memcg
- !6946 [sync] PR-6840:  CVE-2023-52650
- media: edia: dvbdev: fix a use-after-free
- scsi: qla2xxx: Fix command flush on cable pull
- !6093 [sync] PR-5921:  ext4: fix double-free of blocks due to wrong extents moved_len
- !6090 [sync] PR-5977:  btrfs: dev-replace: properly validate device names
- !6096 [sync] PR-6029:  ceph: prevent use-after-free in encode_cap_msg()
- !7029 [sync] PR-6977:  wireguard: netlink: access device through ctx instead of peer
- drm/tegra: dsi: Add missing check for of_find_device_by_node
- wireguard: netlink: access device through ctx instead of peer
- !6986 [sync] PR-6964: v2  CVE-2024-27000
- clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !6691  quota: Fix potential NULL pointer dereference
- serial: core: fix kernel-doc for uart_port_unlock_irqrestore()
- serial: mxs-auart: add spinlock around changing cts state
- serial: core: Provide port lock wrappers
- !6885 [sync] PR-6740:  V2 cpuset: fix race between rebuild scheduler domains and hotplug work
- !6961 [sync] PR-6861:  media: dvb-frontends: avoid stack overflow warnings with clang
- ksmbd: validate payload size in ipc response
- !6912  pstore: inode: Only d_invalidate() is needed
- !6937 [sync] PR-6826:  fat: fix uninitialized field in nostale filehandles
- !6934 [sync] PR-6838:  fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- media: dvb-frontends: avoid stack overflow warnings with clang
- fat: fix uninitialized field in nostale filehandles
- fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- pstore: inode: Only d_invalidate() is needed
- cpuset: fix race between rebuild scheduler domains and hotplug work
- NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- cifs: fix underflow in parse_server_interfaces()
- quota: Fix potential NULL pointer dereference
- vfio/pci: Create persistent INTx handler
- vfio: Introduce interface to flush virqfd inject workqueue
- ceph: prevent use-after-free in encode_cap_msg()
- ext4: fix double-free of blocks due to wrong extents moved_len
- btrfs: dev-replace: properly validate device names
- net/sched: flower: Fix kabi change
- net/sched: flower: Fix chain template offload
- net: atlantic: Fix DMA mapping for PTP hwts ring</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.76.0.156" date="1716379200">- !7634  spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- !7642  hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- !7724  CVE-2024-27002
- !7706  pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- !7618 [sync] PR-5930:  RDMA/srpt: Support specifying the srpt_service_guid parameter
- !6243 [sync] PR-6082:  can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- !6153 [sync] PR-6020:  net/sched: act_mirred: use the backlog for mirred ingress
- !7621 [sync] PR-6259:  arp: Prevent overflow in arp_req_get().
- !7616 [sync] PR-5993:  ipv6: sr: fix possible use-after-free and null-ptr-deref
- !7613 [sync] PR-5996:  mptcp: fix double-free on socket dismantle
- !6223 [sync] PR-6074:  Fix CVE-2024-26787
- !7610 [sync] PR-6279:  Bluetooth: Avoid potential use-after-free in hci_error_reset
- !7380 [sync] PR-6085:  netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- !7377 [sync] PR-6086:  netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- !5984 [sync] PR-5852:  CVE-2024-26809
- !7708  bpf: Guard stack limits against 32bit overflow
- !7637  dm-crypt: don't modify the data when using authenticated encryption
- !7623 [sync] PR-6033:  gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- !7696  ext4: fix corruption during on-line resize
- !7703  pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- !7628 [sync] PR-5950:  RDMA/qedr: Fix qedr_create_user_qp error flow
- clk: mediatek: Do a runtime PM get on controllers during probe
- !6532 [sync] PR-6486:  devlink: fix possible use-after-free and memory leaks in devlink_init()
- !7554 [sync] PR-5530:  net: Fix CVE-2024-26641
- !7551 [sync] PR-7006:  wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7667 [sync] PR-7586:  powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- bpf: Guard stack limits against 32bit overflow
- pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- ext4: fix corruption during on-line resize
- !7604  cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7512 [sync] PR-7408:  backport important fix for broadcom net card
- !7510 [sync] PR-7407:  nvme-fc: do not wait in vain when unloading module
- !7513 [sync] PR-7406:  drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- !7508 [sync] PR-7402:  scsi: lpfc: Fix possible file string name overflow when updating firmware
- !7507 [sync] PR-7404:  scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- !7503 [sync] PR-7403:  scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- !7523 [sync] PR-7401:  nvme-core: check for too small lba shift
- !7499 [sync] PR-7396:  drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- !7493 [sync] PR-7398:  drm/amd/display: Fix memory leak in dm_sw_fini()
- !7490 [sync] PR-7399:  drm/amd/pm: fix a double-free in si_dpm_init
- !7496 [sync] PR-7397:  drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7590  drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7597 [sync] PR-7548:  btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7564  net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- dm-crypt: don't modify the data when using authenticated encryption
- spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- dm-crypt: don't modify the data when using authenticated encryption
- RDMA/qedr: Fix qedr_create_user_qp error flow
- gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- arp: Prevent overflow in arp_req_get().
- RDMA/srpt: Support specifying the srpt_service_guid parameter
- ipv6: sr: fix possible use-after-free and null-ptr-deref
- mptcp: fix double-free on socket dismantle
- Bluetooth: Avoid potential use-after-free in hci_error_reset
- cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7557 [sync] PR-7520:  drm/i915/gt: Reset queue_priority_hint on parking
- drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7363 [sync] PR-5491:  CVE-2024-26640
- !6553  fixup CVE-2024-26908
- !7535 v2  CVE-2024-26907
- net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- drm/i915/gt: Reset queue_priority_hint on parking
- ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()
- ip6_tunnel: use dev_sw_netstats_rx_add()
- wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7518 [sync] PR-7484:  fix CVE-2024-26661
- kernel-doc: fix struct_group_tagged() parsing
- uapi: propagate __struct_group() attributes to the container union
- RDMA/mlx5: Fix fortify source warning while accessing Eth segment
- uapi: stddef.h: Fix __DECLARE_FLEX_ARRAY for C++
- stddef: Introduce DECLARE_FLEX_ARRAY() helper
- uapi/linux/stddef.h: Add include guards
- stddef: Introduce struct_group() helper macro
- !7516 [sync] PR-7483:  Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- !7355  blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- !7347  PM / devfreq: Synchronize devfreq_monitor_[start/stop
- !7357  sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- !7443 [sync] PR-6037:  fix-CVE-2024-26706
- nvme-core: check for too small lba shift
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Add NULL test for 'timing generator' in 'dcn21_set_pipe()'
- !7486 [sync] PR-7476:  firewire: nosy: ensure user_length is taken into account when fetching packet contents
- Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- net/tg3: fix race condition in tg3_reset_task()
- net/tg3: resolve deadlock in tg3_reset_task() during EEH
- net: bnxt: fix a potential use-after-free in bnxt_init_tc
- net/bnx2x: Prevent access to a freed page in page_pool
- nvme-fc: do not wait in vain when unloading module
- scsi: lpfc: Fix possible file string name overflow when updating firmware
- scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- drm/amd/display: Fix memory leak in dm_sw_fini()
- drm/amd/pm: fix a double-free in si_dpm_init
- !7295  KVM: s390: vsie: fix race during shadow creation
- firewire: nosy: ensure user_length is taken into account when fetching packet contents
- !7257  netfilter: nf_tables: disallow anonymous set with timeout flag
- !7336  inet: read sk-&gt;sk_family once in inet_recv_error()
- !7329  tunnels: fix out of bounds access when building IPv6 PMTU error
- !7324  net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- !7311  btrfs: don't drop extent_map for free space inode on write error
- !7449 [sync] PR-5998:  net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- !7446 [sync] PR-6031:  nilfs2: fix potential bug in end_buffer_async_write
- !7276  llc: Drop support for ETH_P_TR_802_2.
- !7281  llc: make llc_ui_sendmsg() more robust against bonding changes
- !7457  netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7263  Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- !7479 [sync] PR-7424:  net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- !7343  ppp_async: limit MRU to 64K
- !5867 [sync] PR-5794:  um: time-travel: fix time corruption
- !7390 [sync] PR-5469:  wifi: iwlwifi: fix a memory corruption
- !7313  CVE-2024-26686
- !7301  nilfs2: fix data corruption in dsync block recovery for small block sizes
- !7298  powerpc/kasan: Fix addr error caused by page alignment
- !7274  binder: fix race between mmput() and do_exit()
- !7261  ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- !5623 [sync] PR-5566:  tracing: Ensure visibility when inserting an element into tracing_map
- !7241  SUNRPC: Fix a suspicious RCU usage warning
- !7231 [sync] PR-5460: v2  crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- !7240  bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- !7319  mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- !7467 [sync] PR-7394: v2  scsi: sr: Do not leak information in ioctl
- scsi: sr: Do not leak information in ioctl
- !7020 [sync] PR-6855:  KVM: Always flush async #PF workqueue when vCPU is being destroyed
- !7307  iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7427  net: gtp: Fix Use-After-Free in gtp_dellink
- !7431 [sync] PR-3972:  arm64: make cma=0 as default for openeuler
- net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- nilfs2: fix potential bug in end_buffer_async_write
- parisc/unaligned: Fix emulate_ldw() breakage
- parisc/unaligned: Rewrite 64-bit inline assembly of emulate_ldd()
- parisc: Fix random data corruption from exception handler
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_sth()
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_ldd()
- parisc/unaligned: Rewrite inline assembly of emulate_ldw()
- parisc: Mark ex_table entries 32-bit aligned in uaccess.h
- parisc: Fix some apparent put_user() failures
- parisc: Implement __get/put_kernel_nofault()
- parisc: Drop strnlen_user() in favour of generic version
- parisc: Switch user access functions to signal errors in r29 instead of r8
- parisc/unaligned: Rewrite inline assembly of emulate_ldh()
- parisc/unaligned: Use EFAULT fixup handler in unaligned handlers
- !7436 [sync] PR-7414:  clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- arm64: make cma=0 as default for openeuler
- net: gtp: Fix Use-After-Free in gtp_dellink
- !7383 [sync] PR-6428:  net/sched: flower: Fix unable to handle page fault bug in fl_init
- !7267  block/rnbd-srv: Check for unlikely string overflow
- wifi: iwlwifi: fix a memory corruption
- net/sched: flower: Fix unable to handle page fault bug in fl_init
- netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- tcp: add sanity checks to rx zerocopy
- net-zerocopy: Refactor frag-is-remappable test.
- sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- PM / devfreq: Synchronize devfreq_monitor_[start/stop]
- ppp_async: limit MRU to 64K
- inet: read sk-&gt;sk_family once in inet_recv_error()
- tunnels: fix out of bounds access when building IPv6 PMTU error
- net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- fs/proc: do_task_stat: use sig-&gt;stats_lock to gather the threads/children stats
- fs/proc: do_task_stat: use __for_each_thread()
- fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- exit: Use the correct exit_code in /proc/&lt;pid&gt;/stat
- btrfs: don't drop extent_map for free space inode on write error
- iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- nilfs2: fix data corruption in dsync block recovery for small block sizes
- powerpc/kasan: Fix addr error caused by page alignment
- KVM: s390: vsie: fix race during shadow creation
- llc: make llc_ui_sendmsg() more robust against bonding changes
- llc: Drop support for ETH_P_TR_802_2.
- binder: fix race between mmput() and do_exit()
- block/rnbd-srv: Check for unlikely string overflow
- Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- netfilter: nf_tables: disallow anonymous set with timeout flag
- SUNRPC: Fix a suspicious RCU usage warning
- bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- KVM: Always flush async #PF workqueue when vCPU is being destroyed
- x86/xen: Add some null pointer checking to smp.c
- devlink: fix possible use-after-free and memory leaks in devlink_init()
- mmc: mmci: stm32: fix DMA API overlapping mappings warning
- mmc: mmci: stm32: use a buffer for unaligned DMA requests
- net/sched: act_mirred: use the backlog for mirred ingress
- netfilter: nft_set_pipapo: release elements in clone only from destroy path
- netfilter: nft_set_pipapo: remove scratch_aligned pointer
- netfilter: nft_set_pipapo: add helper to release pcpu scratch area
- netfilter: nft_set_pipapo: store index in scratch maps
- um: time-travel: fix time corruption
- tracing: Ensure visibility when inserting an element into tracing_map</changelog>
</package>
<package pkgid="13e0d8ceb8124a9b8c2554b42a5a87211d49915188e5e2e21071568d3c45289d" name="kernel" arch="src">
  <version epoch="0" ver="5.10.0" rel="136.77.0.157.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.73.0.153" date="1713960000">- !6414 [sync] PR-5510:  bus: mhi: host: Drop chan lock before queuing buffers
- !6143 [sync] PR-6103:  riscv: Sparse-Memory/vmemmap out-of-bounds fix
- !6535 [sync] PR-5222:  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6538 [sync] PR-5273:  net/smc: fix illegal rmb_desc access in SMC-D connection dump
- !6529 [sync] PR-5468:  media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- !6298  sp1 fix deadlock in cgroup1_writeback
- !6497 [sync] PR-6407:  wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- net/smc: fix illegal rmb_desc access in SMC-D connection dump
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6506 [sync] PR-5773:  patches for CVE-2023-52617
- !6502 [sync] PR-5772:  firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6518  Fix CVE-2023-52498
- media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- PM: sleep: Fix error handling in dpm_prepare()
- PM: sleep: Fix possible deadlocks in core system-wide PM code
- PM: core: Remove unnecessary (void *) conversions
- PM: sleep: Avoid calling put_device() under dpm_list_mtx
- PM: sleep: Use dev_printk() when possible
- async: Introduce async_schedule_dev_nocall()
- async: Split async_schedule_node_domain()
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
- firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6488 [sync] PR-6455:  CVE-2021-47182
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- !6433 [sync] PR-6312:  fix CVE-2024-24861 for 5.10
- scsi: core: Fix scsi_mode_sense() buffer length handling
- scsi: core: Reshuffle response handling in scsi_mode_sense()
- media: xc4000: Fix atomicity violation in xc4000_get_frequency
- !6411 [sync] PR-5195:  dmaengine: fix NULL pointer in channel unregistration function
- bus: mhi: host: Drop chan lock before queuing buffers
- dmaengine: fix NULL pointer in channel unregistration function
- cgroup_writeback: fix softlockup for blkcg-&gt;memcg_list
- cgroup_writeback: fix deadlock in cgroup1_writeback
- !6081  Fix CVE-2024-26764
- !5967  Fix CVE-2023-52441 and integrate the pre-patch
- riscv: Sparse-Memory/vmemmap out-of-bounds fix
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- ksmbd: fix out of bounds in init_smb2_rsp_hdr()
- ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- ksmbd: return unsupported error on smb1 mount
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.74.0.154" date="1715169600">- !6426 [sync] PR-6291:  aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- !6902  bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- !6920  bpf: Fix hashtab overflow check on 32-bit arches
- !6926  firmware: arm_scmi: Harden accesses to the reset domains
- !6922  bpf: Fix stackmap overflow check on 32-bit arches
- !6864 [sync] PR-6835:  kprobes: Fix check for probe enabled in kill_kprobe()
- !6898 [sync] PR-6592:  net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- firmware: arm_scmi: Harden accesses to the reset domains
- bpf: Fix stackmap overflow check on 32-bit arches
- bpf: Fix hashtab overflow check on 32-bit arches
- bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- !6644 [sync] PR-6623:  amdkfd: use calloc instead of kzalloc to avoid integer overflow
- kprobes: Fix check for probe enabled in kill_kprobe()
- !6388 [sync] PR-6202:  ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- !6628 [sync] PR-6485:  CVE-2024-26843
- !6752 [sync] PR-6677: v3  olk-5.10: bugfix for mm
- mm/madvise: fix potential pte_unmap_unlock pte error
- mm/page_alloc: always attempt to allocate at least one page during bulk allocation
- !6505  cachefiles: fix memory leak in cachefiles_add_cache()
- !6687 [sync] PR-6580:  drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- !6637 [sync] PR-6561:  md: fix kmemleak of rdev-&gt;serial
- amdkfd: use calloc instead of kzalloc to avoid integer overflow
- !6598 [sync] PR-6584:  ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6607 [sync] PR-6579:  media: rc: bpf attach/detach requires write permission
- !6606 [sync] PR-6568:  IB/hfi1: Fix a memleak in init_credit_return
- !6614 [sync] PR-6543:  net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6603 [sync] PR-6520:  firmware: arm_scmi: Fix double free in SMC transport cleanup path
- md: fix kmemleak of rdev-&gt;serial
- firmware: arm_scmi: Fix double free in SMC transport cleanup path
- efi: runtime: Fix potential overflow of soft-reserved region size
- !6249  ubi: Check for too small LEB size in VTBL code
- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6449 [sync] PR-6281: v2  net/mlx5: Update error handler for UCTX and UMEM
- media: rc: bpf attach/detach requires write permission
- IB/hfi1: Fix a memleak in init_credit_return
- ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6476  do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- !6575 [sync] PR-6417:  media: pvrusb2: fix uaf in pvr2_context_set_notify
- media: pvrusb2: fix uaf in pvr2_context_set_notify
- cachefiles: fix memory leak in cachefiles_add_cache()
- do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- net/mlx5: Update error handler for UCTX and UMEM
- aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- ubi: Check for too small LEB size in VTBL code</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.75.0.155" date="1715774400">- !6039 [sync] PR-6006:  fix CVE-2024-26669
- !5882 [sync] PR-5751:  net: atlantic: Fix DMA mapping for PTP hwts ring
- !7340  netfilter: nft_limit: reject configurations that cause integer overflow
- !7253  netfilter: nf_tables: disallow timeout for anonymous sets
- netfilter: nft_limit: reject configurations that cause integer overflow
- netfilter: nf_tables: disallow timeout for anonymous sets
- !7161 [sync] PR-6809:  memcg: fix possible use-after-free in memcg_write_event_control()
- !7121 [sync] PR-7086:  media: ttpci: fix two memleaks in budget_av_attach
- !7123 [sync] PR-7080:  drm: nv04: Fix out of bounds access
- !7145 [sync] PR-7044: v2  nfs: fix UAF in direct writes
- !7155 [sync] PR-7148:  scsi: sd: Fix sd_do_mode_sense() buffer length handling
- !7179  ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- !6978  ksmbd: validate payload size in ipc response
- !7098 [sync] PR-6818:  mm: memcg: fix stale protection of reclaim target memcg
- memcg: fix possible use-after-free in memcg_write_event_control()
- scsi: sd: Fix sd_do_mode_sense() buffer length handling
- nfs: fix UAF in direct writes
- !6764 [sync] PR-6680:  cifs: fix underflow in parse_server_interfaces()
- !6766 [sync] PR-6669:  NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- drm: nv04: Fix out of bounds access
- media: ttpci: fix two memleaks in budget_av_attach
- !7102 [sync] PR-7039:  USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7084 [sync] PR-7013:  media: edia: dvbdev: fix a use-after-free
- !7024 [sync] PR-6988:  clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- !6213 [sync] PR-6178:  CVE-2024-26812
- USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7009 [sync] PR-6959:  mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !7064 [sync] PR-7056:  scsi: qla2xxx: Fix command flush on cable pull
- mm: memcg: fix stale protection of reclaim target memcg
- !6946 [sync] PR-6840:  CVE-2023-52650
- media: edia: dvbdev: fix a use-after-free
- scsi: qla2xxx: Fix command flush on cable pull
- !6093 [sync] PR-5921:  ext4: fix double-free of blocks due to wrong extents moved_len
- !6090 [sync] PR-5977:  btrfs: dev-replace: properly validate device names
- !6096 [sync] PR-6029:  ceph: prevent use-after-free in encode_cap_msg()
- !7029 [sync] PR-6977:  wireguard: netlink: access device through ctx instead of peer
- drm/tegra: dsi: Add missing check for of_find_device_by_node
- wireguard: netlink: access device through ctx instead of peer
- !6986 [sync] PR-6964: v2  CVE-2024-27000
- clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !6691  quota: Fix potential NULL pointer dereference
- serial: core: fix kernel-doc for uart_port_unlock_irqrestore()
- serial: mxs-auart: add spinlock around changing cts state
- serial: core: Provide port lock wrappers
- !6885 [sync] PR-6740:  V2 cpuset: fix race between rebuild scheduler domains and hotplug work
- !6961 [sync] PR-6861:  media: dvb-frontends: avoid stack overflow warnings with clang
- ksmbd: validate payload size in ipc response
- !6912  pstore: inode: Only d_invalidate() is needed
- !6937 [sync] PR-6826:  fat: fix uninitialized field in nostale filehandles
- !6934 [sync] PR-6838:  fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- media: dvb-frontends: avoid stack overflow warnings with clang
- fat: fix uninitialized field in nostale filehandles
- fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- pstore: inode: Only d_invalidate() is needed
- cpuset: fix race between rebuild scheduler domains and hotplug work
- NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- cifs: fix underflow in parse_server_interfaces()
- quota: Fix potential NULL pointer dereference
- vfio/pci: Create persistent INTx handler
- vfio: Introduce interface to flush virqfd inject workqueue
- ceph: prevent use-after-free in encode_cap_msg()
- ext4: fix double-free of blocks due to wrong extents moved_len
- btrfs: dev-replace: properly validate device names
- net/sched: flower: Fix kabi change
- net/sched: flower: Fix chain template offload
- net: atlantic: Fix DMA mapping for PTP hwts ring</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.76.0.156" date="1716379200">- !7634  spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- !7642  hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- !7724  CVE-2024-27002
- !7706  pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- !7618 [sync] PR-5930:  RDMA/srpt: Support specifying the srpt_service_guid parameter
- !6243 [sync] PR-6082:  can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- !6153 [sync] PR-6020:  net/sched: act_mirred: use the backlog for mirred ingress
- !7621 [sync] PR-6259:  arp: Prevent overflow in arp_req_get().
- !7616 [sync] PR-5993:  ipv6: sr: fix possible use-after-free and null-ptr-deref
- !7613 [sync] PR-5996:  mptcp: fix double-free on socket dismantle
- !6223 [sync] PR-6074:  Fix CVE-2024-26787
- !7610 [sync] PR-6279:  Bluetooth: Avoid potential use-after-free in hci_error_reset
- !7380 [sync] PR-6085:  netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- !7377 [sync] PR-6086:  netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- !5984 [sync] PR-5852:  CVE-2024-26809
- !7708  bpf: Guard stack limits against 32bit overflow
- !7637  dm-crypt: don't modify the data when using authenticated encryption
- !7623 [sync] PR-6033:  gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- !7696  ext4: fix corruption during on-line resize
- !7703  pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- !7628 [sync] PR-5950:  RDMA/qedr: Fix qedr_create_user_qp error flow
- clk: mediatek: Do a runtime PM get on controllers during probe
- !6532 [sync] PR-6486:  devlink: fix possible use-after-free and memory leaks in devlink_init()
- !7554 [sync] PR-5530:  net: Fix CVE-2024-26641
- !7551 [sync] PR-7006:  wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7667 [sync] PR-7586:  powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- bpf: Guard stack limits against 32bit overflow
- pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- ext4: fix corruption during on-line resize
- !7604  cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7512 [sync] PR-7408:  backport important fix for broadcom net card
- !7510 [sync] PR-7407:  nvme-fc: do not wait in vain when unloading module
- !7513 [sync] PR-7406:  drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- !7508 [sync] PR-7402:  scsi: lpfc: Fix possible file string name overflow when updating firmware
- !7507 [sync] PR-7404:  scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- !7503 [sync] PR-7403:  scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- !7523 [sync] PR-7401:  nvme-core: check for too small lba shift
- !7499 [sync] PR-7396:  drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- !7493 [sync] PR-7398:  drm/amd/display: Fix memory leak in dm_sw_fini()
- !7490 [sync] PR-7399:  drm/amd/pm: fix a double-free in si_dpm_init
- !7496 [sync] PR-7397:  drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7590  drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7597 [sync] PR-7548:  btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7564  net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- dm-crypt: don't modify the data when using authenticated encryption
- spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- dm-crypt: don't modify the data when using authenticated encryption
- RDMA/qedr: Fix qedr_create_user_qp error flow
- gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- arp: Prevent overflow in arp_req_get().
- RDMA/srpt: Support specifying the srpt_service_guid parameter
- ipv6: sr: fix possible use-after-free and null-ptr-deref
- mptcp: fix double-free on socket dismantle
- Bluetooth: Avoid potential use-after-free in hci_error_reset
- cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7557 [sync] PR-7520:  drm/i915/gt: Reset queue_priority_hint on parking
- drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7363 [sync] PR-5491:  CVE-2024-26640
- !6553  fixup CVE-2024-26908
- !7535 v2  CVE-2024-26907
- net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- drm/i915/gt: Reset queue_priority_hint on parking
- ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()
- ip6_tunnel: use dev_sw_netstats_rx_add()
- wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7518 [sync] PR-7484:  fix CVE-2024-26661
- kernel-doc: fix struct_group_tagged() parsing
- uapi: propagate __struct_group() attributes to the container union
- RDMA/mlx5: Fix fortify source warning while accessing Eth segment
- uapi: stddef.h: Fix __DECLARE_FLEX_ARRAY for C++
- stddef: Introduce DECLARE_FLEX_ARRAY() helper
- uapi/linux/stddef.h: Add include guards
- stddef: Introduce struct_group() helper macro
- !7516 [sync] PR-7483:  Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- !7355  blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- !7347  PM / devfreq: Synchronize devfreq_monitor_[start/stop
- !7357  sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- !7443 [sync] PR-6037:  fix-CVE-2024-26706
- nvme-core: check for too small lba shift
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Add NULL test for 'timing generator' in 'dcn21_set_pipe()'
- !7486 [sync] PR-7476:  firewire: nosy: ensure user_length is taken into account when fetching packet contents
- Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- net/tg3: fix race condition in tg3_reset_task()
- net/tg3: resolve deadlock in tg3_reset_task() during EEH
- net: bnxt: fix a potential use-after-free in bnxt_init_tc
- net/bnx2x: Prevent access to a freed page in page_pool
- nvme-fc: do not wait in vain when unloading module
- scsi: lpfc: Fix possible file string name overflow when updating firmware
- scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- drm/amd/display: Fix memory leak in dm_sw_fini()
- drm/amd/pm: fix a double-free in si_dpm_init
- !7295  KVM: s390: vsie: fix race during shadow creation
- firewire: nosy: ensure user_length is taken into account when fetching packet contents
- !7257  netfilter: nf_tables: disallow anonymous set with timeout flag
- !7336  inet: read sk-&gt;sk_family once in inet_recv_error()
- !7329  tunnels: fix out of bounds access when building IPv6 PMTU error
- !7324  net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- !7311  btrfs: don't drop extent_map for free space inode on write error
- !7449 [sync] PR-5998:  net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- !7446 [sync] PR-6031:  nilfs2: fix potential bug in end_buffer_async_write
- !7276  llc: Drop support for ETH_P_TR_802_2.
- !7281  llc: make llc_ui_sendmsg() more robust against bonding changes
- !7457  netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7263  Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- !7479 [sync] PR-7424:  net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- !7343  ppp_async: limit MRU to 64K
- !5867 [sync] PR-5794:  um: time-travel: fix time corruption
- !7390 [sync] PR-5469:  wifi: iwlwifi: fix a memory corruption
- !7313  CVE-2024-26686
- !7301  nilfs2: fix data corruption in dsync block recovery for small block sizes
- !7298  powerpc/kasan: Fix addr error caused by page alignment
- !7274  binder: fix race between mmput() and do_exit()
- !7261  ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- !5623 [sync] PR-5566:  tracing: Ensure visibility when inserting an element into tracing_map
- !7241  SUNRPC: Fix a suspicious RCU usage warning
- !7231 [sync] PR-5460: v2  crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- !7240  bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- !7319  mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- !7467 [sync] PR-7394: v2  scsi: sr: Do not leak information in ioctl
- scsi: sr: Do not leak information in ioctl
- !7020 [sync] PR-6855:  KVM: Always flush async #PF workqueue when vCPU is being destroyed
- !7307  iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7427  net: gtp: Fix Use-After-Free in gtp_dellink
- !7431 [sync] PR-3972:  arm64: make cma=0 as default for openeuler
- net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- nilfs2: fix potential bug in end_buffer_async_write
- parisc/unaligned: Fix emulate_ldw() breakage
- parisc/unaligned: Rewrite 64-bit inline assembly of emulate_ldd()
- parisc: Fix random data corruption from exception handler
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_sth()
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_ldd()
- parisc/unaligned: Rewrite inline assembly of emulate_ldw()
- parisc: Mark ex_table entries 32-bit aligned in uaccess.h
- parisc: Fix some apparent put_user() failures
- parisc: Implement __get/put_kernel_nofault()
- parisc: Drop strnlen_user() in favour of generic version
- parisc: Switch user access functions to signal errors in r29 instead of r8
- parisc/unaligned: Rewrite inline assembly of emulate_ldh()
- parisc/unaligned: Use EFAULT fixup handler in unaligned handlers
- !7436 [sync] PR-7414:  clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- arm64: make cma=0 as default for openeuler
- net: gtp: Fix Use-After-Free in gtp_dellink
- !7383 [sync] PR-6428:  net/sched: flower: Fix unable to handle page fault bug in fl_init
- !7267  block/rnbd-srv: Check for unlikely string overflow
- wifi: iwlwifi: fix a memory corruption
- net/sched: flower: Fix unable to handle page fault bug in fl_init
- netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- tcp: add sanity checks to rx zerocopy
- net-zerocopy: Refactor frag-is-remappable test.
- sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- PM / devfreq: Synchronize devfreq_monitor_[start/stop]
- ppp_async: limit MRU to 64K
- inet: read sk-&gt;sk_family once in inet_recv_error()
- tunnels: fix out of bounds access when building IPv6 PMTU error
- net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- fs/proc: do_task_stat: use sig-&gt;stats_lock to gather the threads/children stats
- fs/proc: do_task_stat: use __for_each_thread()
- fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- exit: Use the correct exit_code in /proc/&lt;pid&gt;/stat
- btrfs: don't drop extent_map for free space inode on write error
- iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- nilfs2: fix data corruption in dsync block recovery for small block sizes
- powerpc/kasan: Fix addr error caused by page alignment
- KVM: s390: vsie: fix race during shadow creation
- llc: make llc_ui_sendmsg() more robust against bonding changes
- llc: Drop support for ETH_P_TR_802_2.
- binder: fix race between mmput() and do_exit()
- block/rnbd-srv: Check for unlikely string overflow
- Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- netfilter: nf_tables: disallow anonymous set with timeout flag
- SUNRPC: Fix a suspicious RCU usage warning
- bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- KVM: Always flush async #PF workqueue when vCPU is being destroyed
- x86/xen: Add some null pointer checking to smp.c
- devlink: fix possible use-after-free and memory leaks in devlink_init()
- mmc: mmci: stm32: fix DMA API overlapping mappings warning
- mmc: mmci: stm32: use a buffer for unaligned DMA requests
- net/sched: act_mirred: use the backlog for mirred ingress
- netfilter: nft_set_pipapo: release elements in clone only from destroy path
- netfilter: nft_set_pipapo: remove scratch_aligned pointer
- netfilter: nft_set_pipapo: add helper to release pcpu scratch area
- netfilter: nft_set_pipapo: store index in scratch maps
- um: time-travel: fix time corruption
- tracing: Ensure visibility when inserting an element into tracing_map</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.77.0.157" date="1716984000">- !8099  Fix CVE-2023-52854
- !8045  drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- !8148  pinctrl: single: fix potential NULL dereference
- !8157 [sync] PR-8017:  perf/core: Bail out early if the request AUX area is out of bound
- !8114 [sync] PR-8023:  fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !8093 [sync] PR-7980:  Fix CVE-2021-47455
- !8117 [sync] PR-8060:  soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- !7799  net-memcg: Fix scope of sockmem pressure indicators
- !8087 [sync] PR-8019:  pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8095 [sync] PR-7143:  media: usbtv: Remove useless locks in usbtv_video_free()
- !7134 [sync] PR-7092:  Squashfs: check the inode number is not the invalid value of zero
- perf/core: Bail out early if the request AUX area is out of bound
- !8132  scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- pinctrl: single: fix potential NULL dereference
- !8083 [sync] PR-6808:  CVE-2024-26923
- !8003 [sync] PR-7970:  fbmon: prevent division by zero in fb_videomode_from_videomode()
- scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- !6875 [sync] PR-6756:  vfio/fsl-mc: Block calling interrupt handler without trigger
- soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !7879 [sync] PR-7684:  dm snapshot: fix lockup in dm_exception_table_exit
- !8072 [sync] PR-8030:  netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- padata: Fix refcnt handling in padata_free_shell()
- padata: Convert from atomic_t to refcount_t on parallel_data-&gt;refcnt
- !7995  HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !8041  media: vidtv: mux: Add check and kfree for kstrdup
- media: usbtv: Remove useless locks in usbtv_video_free()
- ptp: fix code indentation issues
- ptp: Fix possible memory leak in ptp_clock_register()
- !7962  hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8020  media: bttv: fix use after free error due to btv-&gt;timeout timer
- af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc().
- af_unix: Fix garbage collector racing against connect()
- !8026 [sync] PR-7961:  net: atlantic: eliminate double free in error handling logic
- !7945  crypto: engine - fix crypto_queue backlog handling
- netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- !8034  clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- media: vidtv: mux: Add check and kfree for kstrdup
- clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- !8005 [sync] PR-7903:  virtio_ring : keep used_wrap_counter in
- net: atlantic: eliminate double free in error handling logic
- media: bttv: fix use after free error due to btv-&gt;timeout timer
- virtio_ring : keep used_wrap_counter in vq-&gt;last_used_idx
- fbmon: prevent division by zero in fb_videomode_from_videomode()
- HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !7954  media: vidtv: psi: Add check for kstrdup
- !7973 [sync] PR-7949:  drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- !7968 [sync] PR-7943: v2  netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7939 v2  pstore/platform: Add check for kstrdup
- drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7936 [sync] PR-7911:  ACPI: LPIT: Avoid u32 multiplication overflow
- !7850 [sync] PR-7576:  f2fs: compress: fix reserve_cblocks counting error when out of space
- !7862 [sync] PR-7757:  Fix CVE-2023-52656
- hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- media: vidtv: psi: Add check for kstrdup
- crypto: engine - fix crypto_queue backlog handling
- !7914 [sync] PR-7853:  net/mlx5e: fix a double-free in arfs_create_groups
- pstore/platform: Add check for kstrdup
- ACPI: LPIT: Avoid u32 multiplication overflow
- !7787 [sync] PR-7655: v3  KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7906 [sync] PR-7877: v4  eeprom: at24: fix memory corruption race condition
- net/mlx5e: fix a double-free in arfs_create_groups
- !7897  Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- eeprom: at24: fix memory corruption race condition
- !7796 [sync] PR-7743:  netrom: Fix data-races around sysctl_net_busy_read
- !7884 [sync] PR-7773:  Fix CVE-2023-52698
- Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- calipso: fix memory leak in netlbl_calipso_add_pass()
- netlabel: remove unused parameter in netlbl_netlink_auditinfo()
- net: netlabel: Fix kerneldoc warnings
- dm snapshot: fix lockup in dm_exception_table_exit
- !7859 [sync] PR-7846:  netrom: Fix a data-race around sysctl_netrom_transport_timeout
- io_uring: drop any code related to SCM_RIGHTS
- io_uring/unix: drop usage of io_uring socket
- netrom: Fix a data-race around sysctl_netrom_transport_timeout
- !7778 [sync] PR-7749: v2  wifi: iwlwifi: dbg-tlv: ensure NUL termination
- f2fs: compress: fix reserve_cblocks counting error when out of space
- !7829 [sync] PR-7779:  LoongArch: Define the __io_aw() hook as mmiowb()
- !7826 [sync] PR-7714:  CVE-2024-35936
- !7837 [sync] PR-7681:  xfs: three bug fix recently
- xfs: update dir3 leaf block metadata after swap
- xfs: ensure logflagsp is initialized in xfs_bmap_del_extent_real
- iomap: fix warning in xfs_iomap_write_delalloc_release()
- !7747  x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- !7819 [sync] PR-7734:  mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- LoongArch: Define the __io_aw() hook as mmiowb()
- btrfs: add missing mutex_unlock in btrfs_relocate_sys_chunks()
- btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks()
- mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- net-memcg: Fix scope of sockmem pressure indicators
- netrom: Fix data-races around sysctl_net_busy_read
- KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7768  net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: iwlwifi: dbg-tlv: ensure NUL termination
- !7711 [sync] PR-7579:  powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- !7755  wifi: ath11k: decrease MHI channel buffer length to 8KB
- net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: ath11k: decrease MHI channel buffer length to 8KB
- x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Squashfs: check the inode number is not the invalid value of zero
- vfio/fsl-mc: Block calling interrupt handler without trigger</changelog>
</package>
<package pkgid="d32d6668c90343adab8b9ac3df004565bbb6b6bbe7bd2f48396f1b2775a82837" name="kernel" arch="src">
  <version epoch="0" ver="5.10.0" rel="136.78.0.158.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.73.0.153" date="1713960000">- !6414 [sync] PR-5510:  bus: mhi: host: Drop chan lock before queuing buffers
- !6143 [sync] PR-6103:  riscv: Sparse-Memory/vmemmap out-of-bounds fix
- !6535 [sync] PR-5222:  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6538 [sync] PR-5273:  net/smc: fix illegal rmb_desc access in SMC-D connection dump
- !6529 [sync] PR-5468:  media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- !6298  sp1 fix deadlock in cgroup1_writeback
- !6497 [sync] PR-6407:  wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- net/smc: fix illegal rmb_desc access in SMC-D connection dump
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6506 [sync] PR-5773:  patches for CVE-2023-52617
- !6502 [sync] PR-5772:  firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6518  Fix CVE-2023-52498
- media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- PM: sleep: Fix error handling in dpm_prepare()
- PM: sleep: Fix possible deadlocks in core system-wide PM code
- PM: core: Remove unnecessary (void *) conversions
- PM: sleep: Avoid calling put_device() under dpm_list_mtx
- PM: sleep: Use dev_printk() when possible
- async: Introduce async_schedule_dev_nocall()
- async: Split async_schedule_node_domain()
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
- firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6488 [sync] PR-6455:  CVE-2021-47182
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- !6433 [sync] PR-6312:  fix CVE-2024-24861 for 5.10
- scsi: core: Fix scsi_mode_sense() buffer length handling
- scsi: core: Reshuffle response handling in scsi_mode_sense()
- media: xc4000: Fix atomicity violation in xc4000_get_frequency
- !6411 [sync] PR-5195:  dmaengine: fix NULL pointer in channel unregistration function
- bus: mhi: host: Drop chan lock before queuing buffers
- dmaengine: fix NULL pointer in channel unregistration function
- cgroup_writeback: fix softlockup for blkcg-&gt;memcg_list
- cgroup_writeback: fix deadlock in cgroup1_writeback
- !6081  Fix CVE-2024-26764
- !5967  Fix CVE-2023-52441 and integrate the pre-patch
- riscv: Sparse-Memory/vmemmap out-of-bounds fix
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- ksmbd: fix out of bounds in init_smb2_rsp_hdr()
- ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- ksmbd: return unsupported error on smb1 mount
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.74.0.154" date="1715169600">- !6426 [sync] PR-6291:  aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- !6902  bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- !6920  bpf: Fix hashtab overflow check on 32-bit arches
- !6926  firmware: arm_scmi: Harden accesses to the reset domains
- !6922  bpf: Fix stackmap overflow check on 32-bit arches
- !6864 [sync] PR-6835:  kprobes: Fix check for probe enabled in kill_kprobe()
- !6898 [sync] PR-6592:  net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- firmware: arm_scmi: Harden accesses to the reset domains
- bpf: Fix stackmap overflow check on 32-bit arches
- bpf: Fix hashtab overflow check on 32-bit arches
- bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- !6644 [sync] PR-6623:  amdkfd: use calloc instead of kzalloc to avoid integer overflow
- kprobes: Fix check for probe enabled in kill_kprobe()
- !6388 [sync] PR-6202:  ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- !6628 [sync] PR-6485:  CVE-2024-26843
- !6752 [sync] PR-6677: v3  olk-5.10: bugfix for mm
- mm/madvise: fix potential pte_unmap_unlock pte error
- mm/page_alloc: always attempt to allocate at least one page during bulk allocation
- !6505  cachefiles: fix memory leak in cachefiles_add_cache()
- !6687 [sync] PR-6580:  drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- !6637 [sync] PR-6561:  md: fix kmemleak of rdev-&gt;serial
- amdkfd: use calloc instead of kzalloc to avoid integer overflow
- !6598 [sync] PR-6584:  ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6607 [sync] PR-6579:  media: rc: bpf attach/detach requires write permission
- !6606 [sync] PR-6568:  IB/hfi1: Fix a memleak in init_credit_return
- !6614 [sync] PR-6543:  net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6603 [sync] PR-6520:  firmware: arm_scmi: Fix double free in SMC transport cleanup path
- md: fix kmemleak of rdev-&gt;serial
- firmware: arm_scmi: Fix double free in SMC transport cleanup path
- efi: runtime: Fix potential overflow of soft-reserved region size
- !6249  ubi: Check for too small LEB size in VTBL code
- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6449 [sync] PR-6281: v2  net/mlx5: Update error handler for UCTX and UMEM
- media: rc: bpf attach/detach requires write permission
- IB/hfi1: Fix a memleak in init_credit_return
- ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6476  do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- !6575 [sync] PR-6417:  media: pvrusb2: fix uaf in pvr2_context_set_notify
- media: pvrusb2: fix uaf in pvr2_context_set_notify
- cachefiles: fix memory leak in cachefiles_add_cache()
- do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- net/mlx5: Update error handler for UCTX and UMEM
- aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- ubi: Check for too small LEB size in VTBL code</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.75.0.155" date="1715774400">- !6039 [sync] PR-6006:  fix CVE-2024-26669
- !5882 [sync] PR-5751:  net: atlantic: Fix DMA mapping for PTP hwts ring
- !7340  netfilter: nft_limit: reject configurations that cause integer overflow
- !7253  netfilter: nf_tables: disallow timeout for anonymous sets
- netfilter: nft_limit: reject configurations that cause integer overflow
- netfilter: nf_tables: disallow timeout for anonymous sets
- !7161 [sync] PR-6809:  memcg: fix possible use-after-free in memcg_write_event_control()
- !7121 [sync] PR-7086:  media: ttpci: fix two memleaks in budget_av_attach
- !7123 [sync] PR-7080:  drm: nv04: Fix out of bounds access
- !7145 [sync] PR-7044: v2  nfs: fix UAF in direct writes
- !7155 [sync] PR-7148:  scsi: sd: Fix sd_do_mode_sense() buffer length handling
- !7179  ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- !6978  ksmbd: validate payload size in ipc response
- !7098 [sync] PR-6818:  mm: memcg: fix stale protection of reclaim target memcg
- memcg: fix possible use-after-free in memcg_write_event_control()
- scsi: sd: Fix sd_do_mode_sense() buffer length handling
- nfs: fix UAF in direct writes
- !6764 [sync] PR-6680:  cifs: fix underflow in parse_server_interfaces()
- !6766 [sync] PR-6669:  NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- drm: nv04: Fix out of bounds access
- media: ttpci: fix two memleaks in budget_av_attach
- !7102 [sync] PR-7039:  USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7084 [sync] PR-7013:  media: edia: dvbdev: fix a use-after-free
- !7024 [sync] PR-6988:  clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- !6213 [sync] PR-6178:  CVE-2024-26812
- USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7009 [sync] PR-6959:  mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !7064 [sync] PR-7056:  scsi: qla2xxx: Fix command flush on cable pull
- mm: memcg: fix stale protection of reclaim target memcg
- !6946 [sync] PR-6840:  CVE-2023-52650
- media: edia: dvbdev: fix a use-after-free
- scsi: qla2xxx: Fix command flush on cable pull
- !6093 [sync] PR-5921:  ext4: fix double-free of blocks due to wrong extents moved_len
- !6090 [sync] PR-5977:  btrfs: dev-replace: properly validate device names
- !6096 [sync] PR-6029:  ceph: prevent use-after-free in encode_cap_msg()
- !7029 [sync] PR-6977:  wireguard: netlink: access device through ctx instead of peer
- drm/tegra: dsi: Add missing check for of_find_device_by_node
- wireguard: netlink: access device through ctx instead of peer
- !6986 [sync] PR-6964: v2  CVE-2024-27000
- clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !6691  quota: Fix potential NULL pointer dereference
- serial: core: fix kernel-doc for uart_port_unlock_irqrestore()
- serial: mxs-auart: add spinlock around changing cts state
- serial: core: Provide port lock wrappers
- !6885 [sync] PR-6740:  V2 cpuset: fix race between rebuild scheduler domains and hotplug work
- !6961 [sync] PR-6861:  media: dvb-frontends: avoid stack overflow warnings with clang
- ksmbd: validate payload size in ipc response
- !6912  pstore: inode: Only d_invalidate() is needed
- !6937 [sync] PR-6826:  fat: fix uninitialized field in nostale filehandles
- !6934 [sync] PR-6838:  fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- media: dvb-frontends: avoid stack overflow warnings with clang
- fat: fix uninitialized field in nostale filehandles
- fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- pstore: inode: Only d_invalidate() is needed
- cpuset: fix race between rebuild scheduler domains and hotplug work
- NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- cifs: fix underflow in parse_server_interfaces()
- quota: Fix potential NULL pointer dereference
- vfio/pci: Create persistent INTx handler
- vfio: Introduce interface to flush virqfd inject workqueue
- ceph: prevent use-after-free in encode_cap_msg()
- ext4: fix double-free of blocks due to wrong extents moved_len
- btrfs: dev-replace: properly validate device names
- net/sched: flower: Fix kabi change
- net/sched: flower: Fix chain template offload
- net: atlantic: Fix DMA mapping for PTP hwts ring</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.76.0.156" date="1716379200">- !7634  spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- !7642  hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- !7724  CVE-2024-27002
- !7706  pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- !7618 [sync] PR-5930:  RDMA/srpt: Support specifying the srpt_service_guid parameter
- !6243 [sync] PR-6082:  can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- !6153 [sync] PR-6020:  net/sched: act_mirred: use the backlog for mirred ingress
- !7621 [sync] PR-6259:  arp: Prevent overflow in arp_req_get().
- !7616 [sync] PR-5993:  ipv6: sr: fix possible use-after-free and null-ptr-deref
- !7613 [sync] PR-5996:  mptcp: fix double-free on socket dismantle
- !6223 [sync] PR-6074:  Fix CVE-2024-26787
- !7610 [sync] PR-6279:  Bluetooth: Avoid potential use-after-free in hci_error_reset
- !7380 [sync] PR-6085:  netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- !7377 [sync] PR-6086:  netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- !5984 [sync] PR-5852:  CVE-2024-26809
- !7708  bpf: Guard stack limits against 32bit overflow
- !7637  dm-crypt: don't modify the data when using authenticated encryption
- !7623 [sync] PR-6033:  gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- !7696  ext4: fix corruption during on-line resize
- !7703  pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- !7628 [sync] PR-5950:  RDMA/qedr: Fix qedr_create_user_qp error flow
- clk: mediatek: Do a runtime PM get on controllers during probe
- !6532 [sync] PR-6486:  devlink: fix possible use-after-free and memory leaks in devlink_init()
- !7554 [sync] PR-5530:  net: Fix CVE-2024-26641
- !7551 [sync] PR-7006:  wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7667 [sync] PR-7586:  powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- bpf: Guard stack limits against 32bit overflow
- pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- ext4: fix corruption during on-line resize
- !7604  cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7512 [sync] PR-7408:  backport important fix for broadcom net card
- !7510 [sync] PR-7407:  nvme-fc: do not wait in vain when unloading module
- !7513 [sync] PR-7406:  drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- !7508 [sync] PR-7402:  scsi: lpfc: Fix possible file string name overflow when updating firmware
- !7507 [sync] PR-7404:  scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- !7503 [sync] PR-7403:  scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- !7523 [sync] PR-7401:  nvme-core: check for too small lba shift
- !7499 [sync] PR-7396:  drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- !7493 [sync] PR-7398:  drm/amd/display: Fix memory leak in dm_sw_fini()
- !7490 [sync] PR-7399:  drm/amd/pm: fix a double-free in si_dpm_init
- !7496 [sync] PR-7397:  drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7590  drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7597 [sync] PR-7548:  btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7564  net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- dm-crypt: don't modify the data when using authenticated encryption
- spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- dm-crypt: don't modify the data when using authenticated encryption
- RDMA/qedr: Fix qedr_create_user_qp error flow
- gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- arp: Prevent overflow in arp_req_get().
- RDMA/srpt: Support specifying the srpt_service_guid parameter
- ipv6: sr: fix possible use-after-free and null-ptr-deref
- mptcp: fix double-free on socket dismantle
- Bluetooth: Avoid potential use-after-free in hci_error_reset
- cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7557 [sync] PR-7520:  drm/i915/gt: Reset queue_priority_hint on parking
- drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7363 [sync] PR-5491:  CVE-2024-26640
- !6553  fixup CVE-2024-26908
- !7535 v2  CVE-2024-26907
- net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- drm/i915/gt: Reset queue_priority_hint on parking
- ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()
- ip6_tunnel: use dev_sw_netstats_rx_add()
- wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7518 [sync] PR-7484:  fix CVE-2024-26661
- kernel-doc: fix struct_group_tagged() parsing
- uapi: propagate __struct_group() attributes to the container union
- RDMA/mlx5: Fix fortify source warning while accessing Eth segment
- uapi: stddef.h: Fix __DECLARE_FLEX_ARRAY for C++
- stddef: Introduce DECLARE_FLEX_ARRAY() helper
- uapi/linux/stddef.h: Add include guards
- stddef: Introduce struct_group() helper macro
- !7516 [sync] PR-7483:  Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- !7355  blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- !7347  PM / devfreq: Synchronize devfreq_monitor_[start/stop
- !7357  sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- !7443 [sync] PR-6037:  fix-CVE-2024-26706
- nvme-core: check for too small lba shift
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Add NULL test for 'timing generator' in 'dcn21_set_pipe()'
- !7486 [sync] PR-7476:  firewire: nosy: ensure user_length is taken into account when fetching packet contents
- Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- net/tg3: fix race condition in tg3_reset_task()
- net/tg3: resolve deadlock in tg3_reset_task() during EEH
- net: bnxt: fix a potential use-after-free in bnxt_init_tc
- net/bnx2x: Prevent access to a freed page in page_pool
- nvme-fc: do not wait in vain when unloading module
- scsi: lpfc: Fix possible file string name overflow when updating firmware
- scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- drm/amd/display: Fix memory leak in dm_sw_fini()
- drm/amd/pm: fix a double-free in si_dpm_init
- !7295  KVM: s390: vsie: fix race during shadow creation
- firewire: nosy: ensure user_length is taken into account when fetching packet contents
- !7257  netfilter: nf_tables: disallow anonymous set with timeout flag
- !7336  inet: read sk-&gt;sk_family once in inet_recv_error()
- !7329  tunnels: fix out of bounds access when building IPv6 PMTU error
- !7324  net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- !7311  btrfs: don't drop extent_map for free space inode on write error
- !7449 [sync] PR-5998:  net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- !7446 [sync] PR-6031:  nilfs2: fix potential bug in end_buffer_async_write
- !7276  llc: Drop support for ETH_P_TR_802_2.
- !7281  llc: make llc_ui_sendmsg() more robust against bonding changes
- !7457  netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7263  Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- !7479 [sync] PR-7424:  net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- !7343  ppp_async: limit MRU to 64K
- !5867 [sync] PR-5794:  um: time-travel: fix time corruption
- !7390 [sync] PR-5469:  wifi: iwlwifi: fix a memory corruption
- !7313  CVE-2024-26686
- !7301  nilfs2: fix data corruption in dsync block recovery for small block sizes
- !7298  powerpc/kasan: Fix addr error caused by page alignment
- !7274  binder: fix race between mmput() and do_exit()
- !7261  ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- !5623 [sync] PR-5566:  tracing: Ensure visibility when inserting an element into tracing_map
- !7241  SUNRPC: Fix a suspicious RCU usage warning
- !7231 [sync] PR-5460: v2  crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- !7240  bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- !7319  mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- !7467 [sync] PR-7394: v2  scsi: sr: Do not leak information in ioctl
- scsi: sr: Do not leak information in ioctl
- !7020 [sync] PR-6855:  KVM: Always flush async #PF workqueue when vCPU is being destroyed
- !7307  iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7427  net: gtp: Fix Use-After-Free in gtp_dellink
- !7431 [sync] PR-3972:  arm64: make cma=0 as default for openeuler
- net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- nilfs2: fix potential bug in end_buffer_async_write
- parisc/unaligned: Fix emulate_ldw() breakage
- parisc/unaligned: Rewrite 64-bit inline assembly of emulate_ldd()
- parisc: Fix random data corruption from exception handler
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_sth()
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_ldd()
- parisc/unaligned: Rewrite inline assembly of emulate_ldw()
- parisc: Mark ex_table entries 32-bit aligned in uaccess.h
- parisc: Fix some apparent put_user() failures
- parisc: Implement __get/put_kernel_nofault()
- parisc: Drop strnlen_user() in favour of generic version
- parisc: Switch user access functions to signal errors in r29 instead of r8
- parisc/unaligned: Rewrite inline assembly of emulate_ldh()
- parisc/unaligned: Use EFAULT fixup handler in unaligned handlers
- !7436 [sync] PR-7414:  clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- arm64: make cma=0 as default for openeuler
- net: gtp: Fix Use-After-Free in gtp_dellink
- !7383 [sync] PR-6428:  net/sched: flower: Fix unable to handle page fault bug in fl_init
- !7267  block/rnbd-srv: Check for unlikely string overflow
- wifi: iwlwifi: fix a memory corruption
- net/sched: flower: Fix unable to handle page fault bug in fl_init
- netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- tcp: add sanity checks to rx zerocopy
- net-zerocopy: Refactor frag-is-remappable test.
- sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- PM / devfreq: Synchronize devfreq_monitor_[start/stop]
- ppp_async: limit MRU to 64K
- inet: read sk-&gt;sk_family once in inet_recv_error()
- tunnels: fix out of bounds access when building IPv6 PMTU error
- net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- fs/proc: do_task_stat: use sig-&gt;stats_lock to gather the threads/children stats
- fs/proc: do_task_stat: use __for_each_thread()
- fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- exit: Use the correct exit_code in /proc/&lt;pid&gt;/stat
- btrfs: don't drop extent_map for free space inode on write error
- iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- nilfs2: fix data corruption in dsync block recovery for small block sizes
- powerpc/kasan: Fix addr error caused by page alignment
- KVM: s390: vsie: fix race during shadow creation
- llc: make llc_ui_sendmsg() more robust against bonding changes
- llc: Drop support for ETH_P_TR_802_2.
- binder: fix race between mmput() and do_exit()
- block/rnbd-srv: Check for unlikely string overflow
- Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- netfilter: nf_tables: disallow anonymous set with timeout flag
- SUNRPC: Fix a suspicious RCU usage warning
- bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- KVM: Always flush async #PF workqueue when vCPU is being destroyed
- x86/xen: Add some null pointer checking to smp.c
- devlink: fix possible use-after-free and memory leaks in devlink_init()
- mmc: mmci: stm32: fix DMA API overlapping mappings warning
- mmc: mmci: stm32: use a buffer for unaligned DMA requests
- net/sched: act_mirred: use the backlog for mirred ingress
- netfilter: nft_set_pipapo: release elements in clone only from destroy path
- netfilter: nft_set_pipapo: remove scratch_aligned pointer
- netfilter: nft_set_pipapo: add helper to release pcpu scratch area
- netfilter: nft_set_pipapo: store index in scratch maps
- um: time-travel: fix time corruption
- tracing: Ensure visibility when inserting an element into tracing_map</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.77.0.157" date="1716984000">- !8099  Fix CVE-2023-52854
- !8045  drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- !8148  pinctrl: single: fix potential NULL dereference
- !8157 [sync] PR-8017:  perf/core: Bail out early if the request AUX area is out of bound
- !8114 [sync] PR-8023:  fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !8093 [sync] PR-7980:  Fix CVE-2021-47455
- !8117 [sync] PR-8060:  soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- !7799  net-memcg: Fix scope of sockmem pressure indicators
- !8087 [sync] PR-8019:  pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8095 [sync] PR-7143:  media: usbtv: Remove useless locks in usbtv_video_free()
- !7134 [sync] PR-7092:  Squashfs: check the inode number is not the invalid value of zero
- perf/core: Bail out early if the request AUX area is out of bound
- !8132  scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- pinctrl: single: fix potential NULL dereference
- !8083 [sync] PR-6808:  CVE-2024-26923
- !8003 [sync] PR-7970:  fbmon: prevent division by zero in fb_videomode_from_videomode()
- scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- !6875 [sync] PR-6756:  vfio/fsl-mc: Block calling interrupt handler without trigger
- soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !7879 [sync] PR-7684:  dm snapshot: fix lockup in dm_exception_table_exit
- !8072 [sync] PR-8030:  netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- padata: Fix refcnt handling in padata_free_shell()
- padata: Convert from atomic_t to refcount_t on parallel_data-&gt;refcnt
- !7995  HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !8041  media: vidtv: mux: Add check and kfree for kstrdup
- media: usbtv: Remove useless locks in usbtv_video_free()
- ptp: fix code indentation issues
- ptp: Fix possible memory leak in ptp_clock_register()
- !7962  hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8020  media: bttv: fix use after free error due to btv-&gt;timeout timer
- af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc().
- af_unix: Fix garbage collector racing against connect()
- !8026 [sync] PR-7961:  net: atlantic: eliminate double free in error handling logic
- !7945  crypto: engine - fix crypto_queue backlog handling
- netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- !8034  clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- media: vidtv: mux: Add check and kfree for kstrdup
- clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- !8005 [sync] PR-7903:  virtio_ring : keep used_wrap_counter in
- net: atlantic: eliminate double free in error handling logic
- media: bttv: fix use after free error due to btv-&gt;timeout timer
- virtio_ring : keep used_wrap_counter in vq-&gt;last_used_idx
- fbmon: prevent division by zero in fb_videomode_from_videomode()
- HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !7954  media: vidtv: psi: Add check for kstrdup
- !7973 [sync] PR-7949:  drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- !7968 [sync] PR-7943: v2  netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7939 v2  pstore/platform: Add check for kstrdup
- drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7936 [sync] PR-7911:  ACPI: LPIT: Avoid u32 multiplication overflow
- !7850 [sync] PR-7576:  f2fs: compress: fix reserve_cblocks counting error when out of space
- !7862 [sync] PR-7757:  Fix CVE-2023-52656
- hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- media: vidtv: psi: Add check for kstrdup
- crypto: engine - fix crypto_queue backlog handling
- !7914 [sync] PR-7853:  net/mlx5e: fix a double-free in arfs_create_groups
- pstore/platform: Add check for kstrdup
- ACPI: LPIT: Avoid u32 multiplication overflow
- !7787 [sync] PR-7655: v3  KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7906 [sync] PR-7877: v4  eeprom: at24: fix memory corruption race condition
- net/mlx5e: fix a double-free in arfs_create_groups
- !7897  Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- eeprom: at24: fix memory corruption race condition
- !7796 [sync] PR-7743:  netrom: Fix data-races around sysctl_net_busy_read
- !7884 [sync] PR-7773:  Fix CVE-2023-52698
- Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- calipso: fix memory leak in netlbl_calipso_add_pass()
- netlabel: remove unused parameter in netlbl_netlink_auditinfo()
- net: netlabel: Fix kerneldoc warnings
- dm snapshot: fix lockup in dm_exception_table_exit
- !7859 [sync] PR-7846:  netrom: Fix a data-race around sysctl_netrom_transport_timeout
- io_uring: drop any code related to SCM_RIGHTS
- io_uring/unix: drop usage of io_uring socket
- netrom: Fix a data-race around sysctl_netrom_transport_timeout
- !7778 [sync] PR-7749: v2  wifi: iwlwifi: dbg-tlv: ensure NUL termination
- f2fs: compress: fix reserve_cblocks counting error when out of space
- !7829 [sync] PR-7779:  LoongArch: Define the __io_aw() hook as mmiowb()
- !7826 [sync] PR-7714:  CVE-2024-35936
- !7837 [sync] PR-7681:  xfs: three bug fix recently
- xfs: update dir3 leaf block metadata after swap
- xfs: ensure logflagsp is initialized in xfs_bmap_del_extent_real
- iomap: fix warning in xfs_iomap_write_delalloc_release()
- !7747  x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- !7819 [sync] PR-7734:  mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- LoongArch: Define the __io_aw() hook as mmiowb()
- btrfs: add missing mutex_unlock in btrfs_relocate_sys_chunks()
- btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks()
- mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- net-memcg: Fix scope of sockmem pressure indicators
- netrom: Fix data-races around sysctl_net_busy_read
- KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7768  net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: iwlwifi: dbg-tlv: ensure NUL termination
- !7711 [sync] PR-7579:  powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- !7755  wifi: ath11k: decrease MHI channel buffer length to 8KB
- net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: ath11k: decrease MHI channel buffer length to 8KB
- x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Squashfs: check the inode number is not the invalid value of zero
- vfio/fsl-mc: Block calling interrupt handler without trigger</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.78.0.158" date="1717588800">- !8594 [sync] PR-6990:  netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- !8591 [sync] PR-7174:  CVE-2022-48689
- !8595 [sync] PR-6939:  USB: core: Fix deadlock in usb_deauthorize_interface()
- !8554 [sync] PR-8395:  5.10: fix CVE-2024-35978
- !8364  perf: hisi: Fix use-after-free when register pmu fails
- !8606  smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- !7672  btrfs: send: handle path ref underflow in header iterate_inode_ref()
- !8597 [sync] PR-6393:  crypto: xilinx - call finalize with bh disabled
- !8514  net: ena: Fix incorrect descriptor free behavior
- !8563 [sync] PR-8110:  drm/client: Fully protect modes[
- smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- crypto: xilinx - call finalize with bh disabled
- USB: core: Fix deadlock in usb_deauthorize_interface()
- netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- tcp: TX zerocopy should not sense pfmemalloc status
- net: skbuff: update comment about pfmemalloc propagating
- net: introduce __skb_fill_page_desc_noacc
- tcp: factor out tcp_build_frag()
- !8505  CVE: CVE-2024-36015
- drm/client: Fully protect modes[] with dev-&gt;mode_config.mutex
- !8523  tty: vcc: Add check for kstrdup() in vcc_probe()
- !8487 [sync] PR-8397:  mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- !8486 [sync] PR-8373:  dma-direct: Leak pages on dma_set_decrypted() failure
- !8245 [sync] PR-7870:  CVE-2024-35995
- Bluetooth: Fix memory leak in hci_req_sync_complete()
- !8202  arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- !8408  pinctrl: core: delete incorrect free in pinctrl_enable()
- tty: vcc: Add check for kstrdup() in vcc_probe()
- net: ena: Fix incorrect descriptor free behavior
- !8457 [sync] PR-8416:  iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- !8501 [sync] PR-7889:  vt: fix unicode buffer corruption when deleting characters
- ppdev: Add an error check in register_device
- ppdev: Remove usage of the deprecated ida_simple_xx() API
- vt: fix unicode buffer corruption when deleting characters
- mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- dma-direct: Leak pages on dma_set_decrypted() failure
- !8429  drm/amdgpu: Fix even more out of bound writes from debugfs
- !8340  soc: qcom: llcc: Handle a second device without data corruption
- !8369  efi/capsule-loader: fix incorrect allocation size
- !8312 [sync] PR-8039: v2  dynamic_hugetlb: backport some bugfix
- !8451 [sync] PR-8342:  net/mlx5: Properly link new fs rules into the tree
- !8293  drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- net/mlx5: Properly link new fs rules into the tree
- !8179  jfs: fix array-index-out-of-bounds in diAlloc
- !8167 v2  mmc: sdio: fix possible resource leaks in some error paths
- !8346 [sync] PR-8248:  gfs2: ignore negated quota changes
- !8331 [sync] PR-8254:  sysv: don't call sb_bread() with pointers_lock held
- !8375 [sync] PR-8306:  mptcp: ensure tx skbs always have the MPTCP ext
- drm/amdgpu: Fix even more out of bound writes from debugfs
- !8391 [sync] PR-8109:  vhost-vdpa: fix use after free in vhost_vdpa_probe()
- pinctrl: core: delete incorrect free in pinctrl_enable()
- !8370  locking/ww_mutex/test: Fix potential workqueue corruption
- !8311  drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8334  wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- !8317  net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8235 [sync] PR-8054:  CVE-2023-52669
- !8380 [sync] PR-8212:  fix CVE-2024-35877
- vhost-vdpa: fix use after free in vhost_vdpa_probe()
- !8294  CVE-2023-52735
- x86/mm/pat: fix VM_PAT handling in COW mappings
- !8196  clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- mptcp: ensure tx skbs always have the MPTCP ext
- locking/ww_mutex/test: Fix potential workqueue corruption
- efi/capsule-loader: fix incorrect allocation size
- perf: hisi: Fix use-after-free when register pmu fails
- !7776 [sync] PR-7717:  CVE-2023-52655
- !8323 [sync] PR-8219:  tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8273  ALSA: hda: Do not unset preset when cleaning up codec
- !8269  drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- !8251 v2  CVE-2024-35956
- gfs2: ignore negated quota changes
- soc: qcom: llcc: Handle a second device without data corruption
- wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- sysv: don't call sb_bread() with pointers_lock held
- tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8277  usb: udc: remove warning when queue disabled ep
- net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8289 [sync] PR-8150:  mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !8265 [sync] PR-8228:  ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- mm/dynamic_hugetlb: refine error info in the destruction
- mm/dynamic_hugetlb: make free_huge_page_to_dhugetlb_pool irq safe
- mm/dynamic_hugetlb: check NULL pointer for early parameter
- mm/dynamic_hugetlb: add lru_add_drain_all() before migration
- mm/dynamic_hugetlb: add cond_resched() in hpool_merge_page()
- mm/dynamic_hugetlb: reduce the number of migration attempts
- mm/dpool: Use helper function to lock/unlock
- drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8231  CVE-2023-52804
- bpf, sockmap: Check for any of tcp_bpf_prots when cloning a listener
- bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself
- drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !7833 [sync] PR-7599:  irqchip/gic-v3-its: Prevent double free on error
- !8259 v5  can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- usb: udc: remove warning when queue disabled ep
- ALSA: hda: Do not unset preset when cleaning up codec
- drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- !7855  clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- btrfs: qgroup: fix qgroup prealloc rsv leak in subvolume operations
- btrfs: fix anon_dev leak in create_subvol()
- ACPI: CPPC: Fix access width used for PCC registers
- ACPI: CPPC: Fix bit_offset shift in MASK_VAL() macro
- ACPI: CPPC: Use access_width over bit_width for system memory accesses
- ACPI: CPPC: Fix up I/O port access in cpc_read()
- ACPI: CPPC: Implement support for SystemIO registers
- crypto: s390/aes - Fix buffer overread in CTR mode
- fs/jfs: Add validity check for db_maxag and db_agpref
- fs: jfs: fix shift-out-of-bounds in dbAllocAG
- !8224  ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- !8125 [sync] PR-8042:  xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- jfs: fix array-index-out-of-bounds in diAlloc
- mmc: sdio: fix possible resource leaks in some error paths
- xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- irqchip/gic-v3-its: Prevent double free on error
- usb: aqc111: check packet for fixup for true limit
- btrfs: send: handle path ref underflow in header iterate_inode_ref()</changelog>
</package>
<package pkgid="06e67648d123afa9b636861a823e1386975ba8e62e7c573ffe264e9d6a388877" name="kernel" arch="src">
  <version epoch="0" ver="5.10.0" rel="136.79.0.159.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.73.0.153" date="1713960000">- !6414 [sync] PR-5510:  bus: mhi: host: Drop chan lock before queuing buffers
- !6143 [sync] PR-6103:  riscv: Sparse-Memory/vmemmap out-of-bounds fix
- !6535 [sync] PR-5222:  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6538 [sync] PR-5273:  net/smc: fix illegal rmb_desc access in SMC-D connection dump
- !6529 [sync] PR-5468:  media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- !6298  sp1 fix deadlock in cgroup1_writeback
- !6497 [sync] PR-6407:  wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- net/smc: fix illegal rmb_desc access in SMC-D connection dump
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6506 [sync] PR-5773:  patches for CVE-2023-52617
- !6502 [sync] PR-5772:  firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6518  Fix CVE-2023-52498
- media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- PM: sleep: Fix error handling in dpm_prepare()
- PM: sleep: Fix possible deadlocks in core system-wide PM code
- PM: core: Remove unnecessary (void *) conversions
- PM: sleep: Avoid calling put_device() under dpm_list_mtx
- PM: sleep: Use dev_printk() when possible
- async: Introduce async_schedule_dev_nocall()
- async: Split async_schedule_node_domain()
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
- firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6488 [sync] PR-6455:  CVE-2021-47182
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- !6433 [sync] PR-6312:  fix CVE-2024-24861 for 5.10
- scsi: core: Fix scsi_mode_sense() buffer length handling
- scsi: core: Reshuffle response handling in scsi_mode_sense()
- media: xc4000: Fix atomicity violation in xc4000_get_frequency
- !6411 [sync] PR-5195:  dmaengine: fix NULL pointer in channel unregistration function
- bus: mhi: host: Drop chan lock before queuing buffers
- dmaengine: fix NULL pointer in channel unregistration function
- cgroup_writeback: fix softlockup for blkcg-&gt;memcg_list
- cgroup_writeback: fix deadlock in cgroup1_writeback
- !6081  Fix CVE-2024-26764
- !5967  Fix CVE-2023-52441 and integrate the pre-patch
- riscv: Sparse-Memory/vmemmap out-of-bounds fix
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- ksmbd: fix out of bounds in init_smb2_rsp_hdr()
- ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- ksmbd: return unsupported error on smb1 mount
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.74.0.154" date="1715169600">- !6426 [sync] PR-6291:  aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- !6902  bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- !6920  bpf: Fix hashtab overflow check on 32-bit arches
- !6926  firmware: arm_scmi: Harden accesses to the reset domains
- !6922  bpf: Fix stackmap overflow check on 32-bit arches
- !6864 [sync] PR-6835:  kprobes: Fix check for probe enabled in kill_kprobe()
- !6898 [sync] PR-6592:  net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- firmware: arm_scmi: Harden accesses to the reset domains
- bpf: Fix stackmap overflow check on 32-bit arches
- bpf: Fix hashtab overflow check on 32-bit arches
- bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- !6644 [sync] PR-6623:  amdkfd: use calloc instead of kzalloc to avoid integer overflow
- kprobes: Fix check for probe enabled in kill_kprobe()
- !6388 [sync] PR-6202:  ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- !6628 [sync] PR-6485:  CVE-2024-26843
- !6752 [sync] PR-6677: v3  olk-5.10: bugfix for mm
- mm/madvise: fix potential pte_unmap_unlock pte error
- mm/page_alloc: always attempt to allocate at least one page during bulk allocation
- !6505  cachefiles: fix memory leak in cachefiles_add_cache()
- !6687 [sync] PR-6580:  drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- !6637 [sync] PR-6561:  md: fix kmemleak of rdev-&gt;serial
- amdkfd: use calloc instead of kzalloc to avoid integer overflow
- !6598 [sync] PR-6584:  ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6607 [sync] PR-6579:  media: rc: bpf attach/detach requires write permission
- !6606 [sync] PR-6568:  IB/hfi1: Fix a memleak in init_credit_return
- !6614 [sync] PR-6543:  net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6603 [sync] PR-6520:  firmware: arm_scmi: Fix double free in SMC transport cleanup path
- md: fix kmemleak of rdev-&gt;serial
- firmware: arm_scmi: Fix double free in SMC transport cleanup path
- efi: runtime: Fix potential overflow of soft-reserved region size
- !6249  ubi: Check for too small LEB size in VTBL code
- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6449 [sync] PR-6281: v2  net/mlx5: Update error handler for UCTX and UMEM
- media: rc: bpf attach/detach requires write permission
- IB/hfi1: Fix a memleak in init_credit_return
- ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6476  do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- !6575 [sync] PR-6417:  media: pvrusb2: fix uaf in pvr2_context_set_notify
- media: pvrusb2: fix uaf in pvr2_context_set_notify
- cachefiles: fix memory leak in cachefiles_add_cache()
- do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- net/mlx5: Update error handler for UCTX and UMEM
- aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- ubi: Check for too small LEB size in VTBL code</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.75.0.155" date="1715774400">- !6039 [sync] PR-6006:  fix CVE-2024-26669
- !5882 [sync] PR-5751:  net: atlantic: Fix DMA mapping for PTP hwts ring
- !7340  netfilter: nft_limit: reject configurations that cause integer overflow
- !7253  netfilter: nf_tables: disallow timeout for anonymous sets
- netfilter: nft_limit: reject configurations that cause integer overflow
- netfilter: nf_tables: disallow timeout for anonymous sets
- !7161 [sync] PR-6809:  memcg: fix possible use-after-free in memcg_write_event_control()
- !7121 [sync] PR-7086:  media: ttpci: fix two memleaks in budget_av_attach
- !7123 [sync] PR-7080:  drm: nv04: Fix out of bounds access
- !7145 [sync] PR-7044: v2  nfs: fix UAF in direct writes
- !7155 [sync] PR-7148:  scsi: sd: Fix sd_do_mode_sense() buffer length handling
- !7179  ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- !6978  ksmbd: validate payload size in ipc response
- !7098 [sync] PR-6818:  mm: memcg: fix stale protection of reclaim target memcg
- memcg: fix possible use-after-free in memcg_write_event_control()
- scsi: sd: Fix sd_do_mode_sense() buffer length handling
- nfs: fix UAF in direct writes
- !6764 [sync] PR-6680:  cifs: fix underflow in parse_server_interfaces()
- !6766 [sync] PR-6669:  NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- drm: nv04: Fix out of bounds access
- media: ttpci: fix two memleaks in budget_av_attach
- !7102 [sync] PR-7039:  USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7084 [sync] PR-7013:  media: edia: dvbdev: fix a use-after-free
- !7024 [sync] PR-6988:  clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- !6213 [sync] PR-6178:  CVE-2024-26812
- USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7009 [sync] PR-6959:  mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !7064 [sync] PR-7056:  scsi: qla2xxx: Fix command flush on cable pull
- mm: memcg: fix stale protection of reclaim target memcg
- !6946 [sync] PR-6840:  CVE-2023-52650
- media: edia: dvbdev: fix a use-after-free
- scsi: qla2xxx: Fix command flush on cable pull
- !6093 [sync] PR-5921:  ext4: fix double-free of blocks due to wrong extents moved_len
- !6090 [sync] PR-5977:  btrfs: dev-replace: properly validate device names
- !6096 [sync] PR-6029:  ceph: prevent use-after-free in encode_cap_msg()
- !7029 [sync] PR-6977:  wireguard: netlink: access device through ctx instead of peer
- drm/tegra: dsi: Add missing check for of_find_device_by_node
- wireguard: netlink: access device through ctx instead of peer
- !6986 [sync] PR-6964: v2  CVE-2024-27000
- clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !6691  quota: Fix potential NULL pointer dereference
- serial: core: fix kernel-doc for uart_port_unlock_irqrestore()
- serial: mxs-auart: add spinlock around changing cts state
- serial: core: Provide port lock wrappers
- !6885 [sync] PR-6740:  V2 cpuset: fix race between rebuild scheduler domains and hotplug work
- !6961 [sync] PR-6861:  media: dvb-frontends: avoid stack overflow warnings with clang
- ksmbd: validate payload size in ipc response
- !6912  pstore: inode: Only d_invalidate() is needed
- !6937 [sync] PR-6826:  fat: fix uninitialized field in nostale filehandles
- !6934 [sync] PR-6838:  fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- media: dvb-frontends: avoid stack overflow warnings with clang
- fat: fix uninitialized field in nostale filehandles
- fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- pstore: inode: Only d_invalidate() is needed
- cpuset: fix race between rebuild scheduler domains and hotplug work
- NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- cifs: fix underflow in parse_server_interfaces()
- quota: Fix potential NULL pointer dereference
- vfio/pci: Create persistent INTx handler
- vfio: Introduce interface to flush virqfd inject workqueue
- ceph: prevent use-after-free in encode_cap_msg()
- ext4: fix double-free of blocks due to wrong extents moved_len
- btrfs: dev-replace: properly validate device names
- net/sched: flower: Fix kabi change
- net/sched: flower: Fix chain template offload
- net: atlantic: Fix DMA mapping for PTP hwts ring</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.76.0.156" date="1716379200">- !7634  spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- !7642  hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- !7724  CVE-2024-27002
- !7706  pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- !7618 [sync] PR-5930:  RDMA/srpt: Support specifying the srpt_service_guid parameter
- !6243 [sync] PR-6082:  can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- !6153 [sync] PR-6020:  net/sched: act_mirred: use the backlog for mirred ingress
- !7621 [sync] PR-6259:  arp: Prevent overflow in arp_req_get().
- !7616 [sync] PR-5993:  ipv6: sr: fix possible use-after-free and null-ptr-deref
- !7613 [sync] PR-5996:  mptcp: fix double-free on socket dismantle
- !6223 [sync] PR-6074:  Fix CVE-2024-26787
- !7610 [sync] PR-6279:  Bluetooth: Avoid potential use-after-free in hci_error_reset
- !7380 [sync] PR-6085:  netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- !7377 [sync] PR-6086:  netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- !5984 [sync] PR-5852:  CVE-2024-26809
- !7708  bpf: Guard stack limits against 32bit overflow
- !7637  dm-crypt: don't modify the data when using authenticated encryption
- !7623 [sync] PR-6033:  gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- !7696  ext4: fix corruption during on-line resize
- !7703  pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- !7628 [sync] PR-5950:  RDMA/qedr: Fix qedr_create_user_qp error flow
- clk: mediatek: Do a runtime PM get on controllers during probe
- !6532 [sync] PR-6486:  devlink: fix possible use-after-free and memory leaks in devlink_init()
- !7554 [sync] PR-5530:  net: Fix CVE-2024-26641
- !7551 [sync] PR-7006:  wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7667 [sync] PR-7586:  powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- bpf: Guard stack limits against 32bit overflow
- pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- ext4: fix corruption during on-line resize
- !7604  cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7512 [sync] PR-7408:  backport important fix for broadcom net card
- !7510 [sync] PR-7407:  nvme-fc: do not wait in vain when unloading module
- !7513 [sync] PR-7406:  drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- !7508 [sync] PR-7402:  scsi: lpfc: Fix possible file string name overflow when updating firmware
- !7507 [sync] PR-7404:  scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- !7503 [sync] PR-7403:  scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- !7523 [sync] PR-7401:  nvme-core: check for too small lba shift
- !7499 [sync] PR-7396:  drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- !7493 [sync] PR-7398:  drm/amd/display: Fix memory leak in dm_sw_fini()
- !7490 [sync] PR-7399:  drm/amd/pm: fix a double-free in si_dpm_init
- !7496 [sync] PR-7397:  drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7590  drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7597 [sync] PR-7548:  btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7564  net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- dm-crypt: don't modify the data when using authenticated encryption
- spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- dm-crypt: don't modify the data when using authenticated encryption
- RDMA/qedr: Fix qedr_create_user_qp error flow
- gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- arp: Prevent overflow in arp_req_get().
- RDMA/srpt: Support specifying the srpt_service_guid parameter
- ipv6: sr: fix possible use-after-free and null-ptr-deref
- mptcp: fix double-free on socket dismantle
- Bluetooth: Avoid potential use-after-free in hci_error_reset
- cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7557 [sync] PR-7520:  drm/i915/gt: Reset queue_priority_hint on parking
- drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7363 [sync] PR-5491:  CVE-2024-26640
- !6553  fixup CVE-2024-26908
- !7535 v2  CVE-2024-26907
- net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- drm/i915/gt: Reset queue_priority_hint on parking
- ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()
- ip6_tunnel: use dev_sw_netstats_rx_add()
- wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7518 [sync] PR-7484:  fix CVE-2024-26661
- kernel-doc: fix struct_group_tagged() parsing
- uapi: propagate __struct_group() attributes to the container union
- RDMA/mlx5: Fix fortify source warning while accessing Eth segment
- uapi: stddef.h: Fix __DECLARE_FLEX_ARRAY for C++
- stddef: Introduce DECLARE_FLEX_ARRAY() helper
- uapi/linux/stddef.h: Add include guards
- stddef: Introduce struct_group() helper macro
- !7516 [sync] PR-7483:  Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- !7355  blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- !7347  PM / devfreq: Synchronize devfreq_monitor_[start/stop
- !7357  sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- !7443 [sync] PR-6037:  fix-CVE-2024-26706
- nvme-core: check for too small lba shift
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Add NULL test for 'timing generator' in 'dcn21_set_pipe()'
- !7486 [sync] PR-7476:  firewire: nosy: ensure user_length is taken into account when fetching packet contents
- Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- net/tg3: fix race condition in tg3_reset_task()
- net/tg3: resolve deadlock in tg3_reset_task() during EEH
- net: bnxt: fix a potential use-after-free in bnxt_init_tc
- net/bnx2x: Prevent access to a freed page in page_pool
- nvme-fc: do not wait in vain when unloading module
- scsi: lpfc: Fix possible file string name overflow when updating firmware
- scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- drm/amd/display: Fix memory leak in dm_sw_fini()
- drm/amd/pm: fix a double-free in si_dpm_init
- !7295  KVM: s390: vsie: fix race during shadow creation
- firewire: nosy: ensure user_length is taken into account when fetching packet contents
- !7257  netfilter: nf_tables: disallow anonymous set with timeout flag
- !7336  inet: read sk-&gt;sk_family once in inet_recv_error()
- !7329  tunnels: fix out of bounds access when building IPv6 PMTU error
- !7324  net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- !7311  btrfs: don't drop extent_map for free space inode on write error
- !7449 [sync] PR-5998:  net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- !7446 [sync] PR-6031:  nilfs2: fix potential bug in end_buffer_async_write
- !7276  llc: Drop support for ETH_P_TR_802_2.
- !7281  llc: make llc_ui_sendmsg() more robust against bonding changes
- !7457  netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7263  Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- !7479 [sync] PR-7424:  net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- !7343  ppp_async: limit MRU to 64K
- !5867 [sync] PR-5794:  um: time-travel: fix time corruption
- !7390 [sync] PR-5469:  wifi: iwlwifi: fix a memory corruption
- !7313  CVE-2024-26686
- !7301  nilfs2: fix data corruption in dsync block recovery for small block sizes
- !7298  powerpc/kasan: Fix addr error caused by page alignment
- !7274  binder: fix race between mmput() and do_exit()
- !7261  ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- !5623 [sync] PR-5566:  tracing: Ensure visibility when inserting an element into tracing_map
- !7241  SUNRPC: Fix a suspicious RCU usage warning
- !7231 [sync] PR-5460: v2  crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- !7240  bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- !7319  mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- !7467 [sync] PR-7394: v2  scsi: sr: Do not leak information in ioctl
- scsi: sr: Do not leak information in ioctl
- !7020 [sync] PR-6855:  KVM: Always flush async #PF workqueue when vCPU is being destroyed
- !7307  iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7427  net: gtp: Fix Use-After-Free in gtp_dellink
- !7431 [sync] PR-3972:  arm64: make cma=0 as default for openeuler
- net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- nilfs2: fix potential bug in end_buffer_async_write
- parisc/unaligned: Fix emulate_ldw() breakage
- parisc/unaligned: Rewrite 64-bit inline assembly of emulate_ldd()
- parisc: Fix random data corruption from exception handler
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_sth()
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_ldd()
- parisc/unaligned: Rewrite inline assembly of emulate_ldw()
- parisc: Mark ex_table entries 32-bit aligned in uaccess.h
- parisc: Fix some apparent put_user() failures
- parisc: Implement __get/put_kernel_nofault()
- parisc: Drop strnlen_user() in favour of generic version
- parisc: Switch user access functions to signal errors in r29 instead of r8
- parisc/unaligned: Rewrite inline assembly of emulate_ldh()
- parisc/unaligned: Use EFAULT fixup handler in unaligned handlers
- !7436 [sync] PR-7414:  clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- arm64: make cma=0 as default for openeuler
- net: gtp: Fix Use-After-Free in gtp_dellink
- !7383 [sync] PR-6428:  net/sched: flower: Fix unable to handle page fault bug in fl_init
- !7267  block/rnbd-srv: Check for unlikely string overflow
- wifi: iwlwifi: fix a memory corruption
- net/sched: flower: Fix unable to handle page fault bug in fl_init
- netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- tcp: add sanity checks to rx zerocopy
- net-zerocopy: Refactor frag-is-remappable test.
- sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- PM / devfreq: Synchronize devfreq_monitor_[start/stop]
- ppp_async: limit MRU to 64K
- inet: read sk-&gt;sk_family once in inet_recv_error()
- tunnels: fix out of bounds access when building IPv6 PMTU error
- net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- fs/proc: do_task_stat: use sig-&gt;stats_lock to gather the threads/children stats
- fs/proc: do_task_stat: use __for_each_thread()
- fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- exit: Use the correct exit_code in /proc/&lt;pid&gt;/stat
- btrfs: don't drop extent_map for free space inode on write error
- iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- nilfs2: fix data corruption in dsync block recovery for small block sizes
- powerpc/kasan: Fix addr error caused by page alignment
- KVM: s390: vsie: fix race during shadow creation
- llc: make llc_ui_sendmsg() more robust against bonding changes
- llc: Drop support for ETH_P_TR_802_2.
- binder: fix race between mmput() and do_exit()
- block/rnbd-srv: Check for unlikely string overflow
- Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- netfilter: nf_tables: disallow anonymous set with timeout flag
- SUNRPC: Fix a suspicious RCU usage warning
- bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- KVM: Always flush async #PF workqueue when vCPU is being destroyed
- x86/xen: Add some null pointer checking to smp.c
- devlink: fix possible use-after-free and memory leaks in devlink_init()
- mmc: mmci: stm32: fix DMA API overlapping mappings warning
- mmc: mmci: stm32: use a buffer for unaligned DMA requests
- net/sched: act_mirred: use the backlog for mirred ingress
- netfilter: nft_set_pipapo: release elements in clone only from destroy path
- netfilter: nft_set_pipapo: remove scratch_aligned pointer
- netfilter: nft_set_pipapo: add helper to release pcpu scratch area
- netfilter: nft_set_pipapo: store index in scratch maps
- um: time-travel: fix time corruption
- tracing: Ensure visibility when inserting an element into tracing_map</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.77.0.157" date="1716984000">- !8099  Fix CVE-2023-52854
- !8045  drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- !8148  pinctrl: single: fix potential NULL dereference
- !8157 [sync] PR-8017:  perf/core: Bail out early if the request AUX area is out of bound
- !8114 [sync] PR-8023:  fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !8093 [sync] PR-7980:  Fix CVE-2021-47455
- !8117 [sync] PR-8060:  soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- !7799  net-memcg: Fix scope of sockmem pressure indicators
- !8087 [sync] PR-8019:  pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8095 [sync] PR-7143:  media: usbtv: Remove useless locks in usbtv_video_free()
- !7134 [sync] PR-7092:  Squashfs: check the inode number is not the invalid value of zero
- perf/core: Bail out early if the request AUX area is out of bound
- !8132  scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- pinctrl: single: fix potential NULL dereference
- !8083 [sync] PR-6808:  CVE-2024-26923
- !8003 [sync] PR-7970:  fbmon: prevent division by zero in fb_videomode_from_videomode()
- scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- !6875 [sync] PR-6756:  vfio/fsl-mc: Block calling interrupt handler without trigger
- soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !7879 [sync] PR-7684:  dm snapshot: fix lockup in dm_exception_table_exit
- !8072 [sync] PR-8030:  netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- padata: Fix refcnt handling in padata_free_shell()
- padata: Convert from atomic_t to refcount_t on parallel_data-&gt;refcnt
- !7995  HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !8041  media: vidtv: mux: Add check and kfree for kstrdup
- media: usbtv: Remove useless locks in usbtv_video_free()
- ptp: fix code indentation issues
- ptp: Fix possible memory leak in ptp_clock_register()
- !7962  hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8020  media: bttv: fix use after free error due to btv-&gt;timeout timer
- af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc().
- af_unix: Fix garbage collector racing against connect()
- !8026 [sync] PR-7961:  net: atlantic: eliminate double free in error handling logic
- !7945  crypto: engine - fix crypto_queue backlog handling
- netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- !8034  clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- media: vidtv: mux: Add check and kfree for kstrdup
- clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- !8005 [sync] PR-7903:  virtio_ring : keep used_wrap_counter in
- net: atlantic: eliminate double free in error handling logic
- media: bttv: fix use after free error due to btv-&gt;timeout timer
- virtio_ring : keep used_wrap_counter in vq-&gt;last_used_idx
- fbmon: prevent division by zero in fb_videomode_from_videomode()
- HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !7954  media: vidtv: psi: Add check for kstrdup
- !7973 [sync] PR-7949:  drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- !7968 [sync] PR-7943: v2  netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7939 v2  pstore/platform: Add check for kstrdup
- drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7936 [sync] PR-7911:  ACPI: LPIT: Avoid u32 multiplication overflow
- !7850 [sync] PR-7576:  f2fs: compress: fix reserve_cblocks counting error when out of space
- !7862 [sync] PR-7757:  Fix CVE-2023-52656
- hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- media: vidtv: psi: Add check for kstrdup
- crypto: engine - fix crypto_queue backlog handling
- !7914 [sync] PR-7853:  net/mlx5e: fix a double-free in arfs_create_groups
- pstore/platform: Add check for kstrdup
- ACPI: LPIT: Avoid u32 multiplication overflow
- !7787 [sync] PR-7655: v3  KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7906 [sync] PR-7877: v4  eeprom: at24: fix memory corruption race condition
- net/mlx5e: fix a double-free in arfs_create_groups
- !7897  Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- eeprom: at24: fix memory corruption race condition
- !7796 [sync] PR-7743:  netrom: Fix data-races around sysctl_net_busy_read
- !7884 [sync] PR-7773:  Fix CVE-2023-52698
- Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- calipso: fix memory leak in netlbl_calipso_add_pass()
- netlabel: remove unused parameter in netlbl_netlink_auditinfo()
- net: netlabel: Fix kerneldoc warnings
- dm snapshot: fix lockup in dm_exception_table_exit
- !7859 [sync] PR-7846:  netrom: Fix a data-race around sysctl_netrom_transport_timeout
- io_uring: drop any code related to SCM_RIGHTS
- io_uring/unix: drop usage of io_uring socket
- netrom: Fix a data-race around sysctl_netrom_transport_timeout
- !7778 [sync] PR-7749: v2  wifi: iwlwifi: dbg-tlv: ensure NUL termination
- f2fs: compress: fix reserve_cblocks counting error when out of space
- !7829 [sync] PR-7779:  LoongArch: Define the __io_aw() hook as mmiowb()
- !7826 [sync] PR-7714:  CVE-2024-35936
- !7837 [sync] PR-7681:  xfs: three bug fix recently
- xfs: update dir3 leaf block metadata after swap
- xfs: ensure logflagsp is initialized in xfs_bmap_del_extent_real
- iomap: fix warning in xfs_iomap_write_delalloc_release()
- !7747  x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- !7819 [sync] PR-7734:  mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- LoongArch: Define the __io_aw() hook as mmiowb()
- btrfs: add missing mutex_unlock in btrfs_relocate_sys_chunks()
- btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks()
- mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- net-memcg: Fix scope of sockmem pressure indicators
- netrom: Fix data-races around sysctl_net_busy_read
- KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7768  net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: iwlwifi: dbg-tlv: ensure NUL termination
- !7711 [sync] PR-7579:  powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- !7755  wifi: ath11k: decrease MHI channel buffer length to 8KB
- net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: ath11k: decrease MHI channel buffer length to 8KB
- x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Squashfs: check the inode number is not the invalid value of zero
- vfio/fsl-mc: Block calling interrupt handler without trigger</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.78.0.158" date="1717588800">- !8594 [sync] PR-6990:  netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- !8591 [sync] PR-7174:  CVE-2022-48689
- !8595 [sync] PR-6939:  USB: core: Fix deadlock in usb_deauthorize_interface()
- !8554 [sync] PR-8395:  5.10: fix CVE-2024-35978
- !8364  perf: hisi: Fix use-after-free when register pmu fails
- !8606  smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- !7672  btrfs: send: handle path ref underflow in header iterate_inode_ref()
- !8597 [sync] PR-6393:  crypto: xilinx - call finalize with bh disabled
- !8514  net: ena: Fix incorrect descriptor free behavior
- !8563 [sync] PR-8110:  drm/client: Fully protect modes[
- smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- crypto: xilinx - call finalize with bh disabled
- USB: core: Fix deadlock in usb_deauthorize_interface()
- netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- tcp: TX zerocopy should not sense pfmemalloc status
- net: skbuff: update comment about pfmemalloc propagating
- net: introduce __skb_fill_page_desc_noacc
- tcp: factor out tcp_build_frag()
- !8505  CVE: CVE-2024-36015
- drm/client: Fully protect modes[] with dev-&gt;mode_config.mutex
- !8523  tty: vcc: Add check for kstrdup() in vcc_probe()
- !8487 [sync] PR-8397:  mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- !8486 [sync] PR-8373:  dma-direct: Leak pages on dma_set_decrypted() failure
- !8245 [sync] PR-7870:  CVE-2024-35995
- Bluetooth: Fix memory leak in hci_req_sync_complete()
- !8202  arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- !8408  pinctrl: core: delete incorrect free in pinctrl_enable()
- tty: vcc: Add check for kstrdup() in vcc_probe()
- net: ena: Fix incorrect descriptor free behavior
- !8457 [sync] PR-8416:  iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- !8501 [sync] PR-7889:  vt: fix unicode buffer corruption when deleting characters
- ppdev: Add an error check in register_device
- ppdev: Remove usage of the deprecated ida_simple_xx() API
- vt: fix unicode buffer corruption when deleting characters
- mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- dma-direct: Leak pages on dma_set_decrypted() failure
- !8429  drm/amdgpu: Fix even more out of bound writes from debugfs
- !8340  soc: qcom: llcc: Handle a second device without data corruption
- !8369  efi/capsule-loader: fix incorrect allocation size
- !8312 [sync] PR-8039: v2  dynamic_hugetlb: backport some bugfix
- !8451 [sync] PR-8342:  net/mlx5: Properly link new fs rules into the tree
- !8293  drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- net/mlx5: Properly link new fs rules into the tree
- !8179  jfs: fix array-index-out-of-bounds in diAlloc
- !8167 v2  mmc: sdio: fix possible resource leaks in some error paths
- !8346 [sync] PR-8248:  gfs2: ignore negated quota changes
- !8331 [sync] PR-8254:  sysv: don't call sb_bread() with pointers_lock held
- !8375 [sync] PR-8306:  mptcp: ensure tx skbs always have the MPTCP ext
- drm/amdgpu: Fix even more out of bound writes from debugfs
- !8391 [sync] PR-8109:  vhost-vdpa: fix use after free in vhost_vdpa_probe()
- pinctrl: core: delete incorrect free in pinctrl_enable()
- !8370  locking/ww_mutex/test: Fix potential workqueue corruption
- !8311  drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8334  wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- !8317  net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8235 [sync] PR-8054:  CVE-2023-52669
- !8380 [sync] PR-8212:  fix CVE-2024-35877
- vhost-vdpa: fix use after free in vhost_vdpa_probe()
- !8294  CVE-2023-52735
- x86/mm/pat: fix VM_PAT handling in COW mappings
- !8196  clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- mptcp: ensure tx skbs always have the MPTCP ext
- locking/ww_mutex/test: Fix potential workqueue corruption
- efi/capsule-loader: fix incorrect allocation size
- perf: hisi: Fix use-after-free when register pmu fails
- !7776 [sync] PR-7717:  CVE-2023-52655
- !8323 [sync] PR-8219:  tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8273  ALSA: hda: Do not unset preset when cleaning up codec
- !8269  drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- !8251 v2  CVE-2024-35956
- gfs2: ignore negated quota changes
- soc: qcom: llcc: Handle a second device without data corruption
- wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- sysv: don't call sb_bread() with pointers_lock held
- tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8277  usb: udc: remove warning when queue disabled ep
- net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8289 [sync] PR-8150:  mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !8265 [sync] PR-8228:  ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- mm/dynamic_hugetlb: refine error info in the destruction
- mm/dynamic_hugetlb: make free_huge_page_to_dhugetlb_pool irq safe
- mm/dynamic_hugetlb: check NULL pointer for early parameter
- mm/dynamic_hugetlb: add lru_add_drain_all() before migration
- mm/dynamic_hugetlb: add cond_resched() in hpool_merge_page()
- mm/dynamic_hugetlb: reduce the number of migration attempts
- mm/dpool: Use helper function to lock/unlock
- drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8231  CVE-2023-52804
- bpf, sockmap: Check for any of tcp_bpf_prots when cloning a listener
- bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself
- drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !7833 [sync] PR-7599:  irqchip/gic-v3-its: Prevent double free on error
- !8259 v5  can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- usb: udc: remove warning when queue disabled ep
- ALSA: hda: Do not unset preset when cleaning up codec
- drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- !7855  clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- btrfs: qgroup: fix qgroup prealloc rsv leak in subvolume operations
- btrfs: fix anon_dev leak in create_subvol()
- ACPI: CPPC: Fix access width used for PCC registers
- ACPI: CPPC: Fix bit_offset shift in MASK_VAL() macro
- ACPI: CPPC: Use access_width over bit_width for system memory accesses
- ACPI: CPPC: Fix up I/O port access in cpc_read()
- ACPI: CPPC: Implement support for SystemIO registers
- crypto: s390/aes - Fix buffer overread in CTR mode
- fs/jfs: Add validity check for db_maxag and db_agpref
- fs: jfs: fix shift-out-of-bounds in dbAllocAG
- !8224  ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- !8125 [sync] PR-8042:  xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- jfs: fix array-index-out-of-bounds in diAlloc
- mmc: sdio: fix possible resource leaks in some error paths
- xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- irqchip/gic-v3-its: Prevent double free on error
- usb: aqc111: check packet for fixup for true limit
- btrfs: send: handle path ref underflow in header iterate_inode_ref()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.79.0.159" date="1718193600">- !8950  aio: fix mremap after fork null-deref
- !8948  CVE-2022-48652
- !8866  ipv6: prevent NULL dereference in ip6_output()
- !8780  smb: client: fix UAF in smb2_reconnect_server()
- !8859  net/smc: avoid data corruption caused by decline
- !8722 v2  SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !8964  Fix CVE-2024-35915
- !8963  Fix CVE-2024-35915
- !8735  mptcp: ensure snd_nxt is properly initialized on connect
- !8761  tipc: fix UAF in error path
- !8741  octeontx2-af: avoid off-by-one read from userspace
- !8953  powerpc/powernv: Add a null pointer check in opal_event_init()
- !8685  mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- !8967  Fix CVE-2024-36949
- !8861  blk-iocost: do not WARN if iocg was already offlined
- !8841 v2  IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- !8945  usb: typec: ucsi: Limit read size on v1.2
- !8905  ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8709 [sync] PR-8046:  block: prevent division by zero in blk_rq_stat_sum()
- !8839  blk-iocost: avoid out of bounds shift
- !8857  PCI/PM: Drain runtime-idle callbacks before driver removal
- amd/amdkfd: sync all devices to wait all processes being evicted
- drm/amdkfd: Rework kfd_locked handling
- !8911  net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- !8915  gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- !8788 [sync] PR-8558:  xen-netfront: Add missing skb_mark_for_recycle
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- powerpc/powernv: Add a null pointer check in opal_event_init()
- aio: fix mremap after fork null-deref
- ice: Fix crash by keep old cfg when update TCs more than queues
- ice: ethtool: Prohibit improper channel config for DCB
- !8880  net: core: reject skb_copy(_expand) for fraglist GSO skbs
- usb: typec: ucsi: Limit read size on v1.2
- !8892  net: fix out-of-bounds access in ops_init
- !8810  net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8672  fix CVE-2024-36021 and CVE-2024-36900
- !8886  CVE-2024-36933
- gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8755  drm/amd/display: Avoid NULL dereference of timing generator
- !8754  pwm: Fix double shift bug
- !8850  ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- net: fix out-of-bounds access in ops_init
- !8665  phonet/pep: fix racy skb_queue_empty() use
- nsh: Restore skb-&gt;{protocol,data,mac_header} for outer header in nsh_gso_segment().
- net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment()
- net: core: reject skb_copy(_expand) for fraglist GSO skbs
- ipv6: prevent NULL dereference in ip6_output()
- blk-iocost: do not WARN if iocg was already offlined
- net/smc: avoid data corruption caused by decline
- PCI/PM: Drain runtime-idle callbacks before driver removal
- ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- !8687  tcp: properly terminate timers for kernel sockets
- !8630  erspan: make sure erspan_base_hdr is present in skb-&gt;head
- IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- blk-iocost: avoid out of bounds shift
- !7988 [sync] PR-7960:  ipv6: Fix infinite recursion in fib6_dump_done().
- !8388 [sync] PR-8300:  ipvlan: add ipvlan_route_v6_outbound() helper
- !8282 [sync] PR-8133:  fix CVE-2021-47265
- !7925 [sync] PR-7741:  ipv4: check for NULL idev in ip_route_use_hint()
- !8724  tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- !8480  scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- !8622  fs/9p: only translate RWX permissions for plain 9P2000
- net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8728  net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8790  Bluetooth: SCO: Fix not validating setsockopt user input
- !8680  rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- !8713 [sync] PR-8583:  mmc: sdhci-msm: pervent access to suspended controller
- !8670  CVE-2024-35854
- Bluetooth: SCO: Fix not validating setsockopt user input
- !8696  clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- !8653 v3  clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- xen-netfront: Add missing skb_mark_for_recycle
- !8571  jfs: fix two array-index-out-of-bounds issuse
- !8356  nilfs2: fix underflow in second superblock position calculations
- !8592  geneve: fix header validation in geneve[6
- !8531  gpiolib: cdev: fix uninitialised kfifo
- smb: client: fix UAF in smb2_reconnect_server()
- !8631 [sync] PR-8519:  mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- tipc: fix UAF in error path
- !8751  ubifs: Check @c-&gt;dirty_[n|p
- drm/amd/display: Avoid NULL dereference of timing generator
- pwm: Fix double shift bug
- !8633 [sync] PR-8425:  CVE-2023-52677
- ubifs: Check @c-&gt;dirty_[n|p]n_cnt and @c-&gt;nroot state under @c-&gt;lp_mutex
- octeontx2-af: avoid off-by-one read from userspace
- !8669  wifi: ath11k: fix dfs radar event locking
- !8619  CVE-2024-35896
- !8608  CVE-2024-35895
- mptcp: ensure snd_nxt is properly initialized on connect
- !8659  wifi: ath11k: fix htt pktlog locking
- !8587  fix CVE-2021-47558
- net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8569  fix CVE-2024-36906
- tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !7933  bpf: Protect against int overflow for stack access size
- !8627 [sync] PR-8561:  mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- !8625 [sync] PR-8497:  Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- mmc: sdhci-msm: pervent access to suspended controller
- !8572  xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- block: prevent division by zero in blk_rq_stat_sum()
- clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- tcp: properly terminate timers for kernel sockets
- mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- net: hns3: fix kernel crash when devlink reload during initialization
- net: hns3: release PTP resources if pf initialization failed
- net: hns3: fix kernel crash when devlink reload during vf initialization
- net: hns3: fix kernel crash when devlink reload during pf initialization
- mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash
- wifi: ath11k: fix dfs radar event locking
- phonet/pep: fix racy skb_queue_empty() use
- wifi: ath11k: fix htt pktlog locking
- clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- !8537  scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- !8538  drm/amdgpu: Fix potential null pointer derefernce
- !8540  s390/dasd: protect device queue against concurrent access
- !8462  i2c: smbus: fix NULL function pointer dereference
- !8432  platform/x86: wmi: Fix opening of char device
- riscv: Check if the code to patch lies in the exit section
- mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- erspan: make sure erspan_base_hdr is present in skb-&gt;head
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- fs/9p: only translate RWX permissions for plain 9P2000
- netfilter: complete validation of user input
- netfilter: validate user input for expected length
- Revert "bpf, sockmap: Prevent lock inversion deadlock in map delete elem"
- bpf: Allow delete from sockmap/sockhash only if update is allowed
- bpf, sockmap: Prevent lock inversion deadlock in map delete elem
- geneve: fix header validation in geneve[6]_xmit_skb
- net: stmmac: Disable Tx queues when reconfiguring the interface
- xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- jfs: fix array-index-out-of-bounds in dbFindLeaf
- fs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev
- ARM: 9381/1: kasan: clear stale stack poison
- s390/dasd: protect device queue against concurrent access
- drm/amdgpu: Fix potential null pointer derefernce
- scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- gpiolib: cdev: fix uninitialised kfifo
- scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- i2c: smbus: fix NULL function pointer dereference
- platform/x86: wmi: Fix opening of char device
- ipvlan: add ipvlan_route_v6_outbound() helper
- nilfs2: fix underflow in second superblock position calculations
- RDMA: Verify port when creating flow rule
- IB/mlx4: Use port iterator and validation APIs
- ipv6: Fix infinite recursion in fib6_dump_done().
- bpf: Protect against int overflow for stack access size
- ipv4: check for NULL idev in ip_route_use_hint()</changelog>
</package>
<package pkgid="eb80e3f1a350cb801322d67f8bb474618e7babf14ec91e1ea973e61bbba347cd" name="kernel" arch="src">
  <version epoch="0" ver="5.10.0" rel="136.80.0.160.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.73.0.153" date="1713960000">- !6414 [sync] PR-5510:  bus: mhi: host: Drop chan lock before queuing buffers
- !6143 [sync] PR-6103:  riscv: Sparse-Memory/vmemmap out-of-bounds fix
- !6535 [sync] PR-5222:  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6538 [sync] PR-5273:  net/smc: fix illegal rmb_desc access in SMC-D connection dump
- !6529 [sync] PR-5468:  media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- !6298  sp1 fix deadlock in cgroup1_writeback
- !6497 [sync] PR-6407:  wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- net/smc: fix illegal rmb_desc access in SMC-D connection dump
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6506 [sync] PR-5773:  patches for CVE-2023-52617
- !6502 [sync] PR-5772:  firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6518  Fix CVE-2023-52498
- media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- PM: sleep: Fix error handling in dpm_prepare()
- PM: sleep: Fix possible deadlocks in core system-wide PM code
- PM: core: Remove unnecessary (void *) conversions
- PM: sleep: Avoid calling put_device() under dpm_list_mtx
- PM: sleep: Use dev_printk() when possible
- async: Introduce async_schedule_dev_nocall()
- async: Split async_schedule_node_domain()
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
- firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6488 [sync] PR-6455:  CVE-2021-47182
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- !6433 [sync] PR-6312:  fix CVE-2024-24861 for 5.10
- scsi: core: Fix scsi_mode_sense() buffer length handling
- scsi: core: Reshuffle response handling in scsi_mode_sense()
- media: xc4000: Fix atomicity violation in xc4000_get_frequency
- !6411 [sync] PR-5195:  dmaengine: fix NULL pointer in channel unregistration function
- bus: mhi: host: Drop chan lock before queuing buffers
- dmaengine: fix NULL pointer in channel unregistration function
- cgroup_writeback: fix softlockup for blkcg-&gt;memcg_list
- cgroup_writeback: fix deadlock in cgroup1_writeback
- !6081  Fix CVE-2024-26764
- !5967  Fix CVE-2023-52441 and integrate the pre-patch
- riscv: Sparse-Memory/vmemmap out-of-bounds fix
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- ksmbd: fix out of bounds in init_smb2_rsp_hdr()
- ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- ksmbd: return unsupported error on smb1 mount
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.74.0.154" date="1715169600">- !6426 [sync] PR-6291:  aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- !6902  bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- !6920  bpf: Fix hashtab overflow check on 32-bit arches
- !6926  firmware: arm_scmi: Harden accesses to the reset domains
- !6922  bpf: Fix stackmap overflow check on 32-bit arches
- !6864 [sync] PR-6835:  kprobes: Fix check for probe enabled in kill_kprobe()
- !6898 [sync] PR-6592:  net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- firmware: arm_scmi: Harden accesses to the reset domains
- bpf: Fix stackmap overflow check on 32-bit arches
- bpf: Fix hashtab overflow check on 32-bit arches
- bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- !6644 [sync] PR-6623:  amdkfd: use calloc instead of kzalloc to avoid integer overflow
- kprobes: Fix check for probe enabled in kill_kprobe()
- !6388 [sync] PR-6202:  ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- !6628 [sync] PR-6485:  CVE-2024-26843
- !6752 [sync] PR-6677: v3  olk-5.10: bugfix for mm
- mm/madvise: fix potential pte_unmap_unlock pte error
- mm/page_alloc: always attempt to allocate at least one page during bulk allocation
- !6505  cachefiles: fix memory leak in cachefiles_add_cache()
- !6687 [sync] PR-6580:  drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- !6637 [sync] PR-6561:  md: fix kmemleak of rdev-&gt;serial
- amdkfd: use calloc instead of kzalloc to avoid integer overflow
- !6598 [sync] PR-6584:  ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6607 [sync] PR-6579:  media: rc: bpf attach/detach requires write permission
- !6606 [sync] PR-6568:  IB/hfi1: Fix a memleak in init_credit_return
- !6614 [sync] PR-6543:  net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6603 [sync] PR-6520:  firmware: arm_scmi: Fix double free in SMC transport cleanup path
- md: fix kmemleak of rdev-&gt;serial
- firmware: arm_scmi: Fix double free in SMC transport cleanup path
- efi: runtime: Fix potential overflow of soft-reserved region size
- !6249  ubi: Check for too small LEB size in VTBL code
- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6449 [sync] PR-6281: v2  net/mlx5: Update error handler for UCTX and UMEM
- media: rc: bpf attach/detach requires write permission
- IB/hfi1: Fix a memleak in init_credit_return
- ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6476  do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- !6575 [sync] PR-6417:  media: pvrusb2: fix uaf in pvr2_context_set_notify
- media: pvrusb2: fix uaf in pvr2_context_set_notify
- cachefiles: fix memory leak in cachefiles_add_cache()
- do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- net/mlx5: Update error handler for UCTX and UMEM
- aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- ubi: Check for too small LEB size in VTBL code</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.75.0.155" date="1715774400">- !6039 [sync] PR-6006:  fix CVE-2024-26669
- !5882 [sync] PR-5751:  net: atlantic: Fix DMA mapping for PTP hwts ring
- !7340  netfilter: nft_limit: reject configurations that cause integer overflow
- !7253  netfilter: nf_tables: disallow timeout for anonymous sets
- netfilter: nft_limit: reject configurations that cause integer overflow
- netfilter: nf_tables: disallow timeout for anonymous sets
- !7161 [sync] PR-6809:  memcg: fix possible use-after-free in memcg_write_event_control()
- !7121 [sync] PR-7086:  media: ttpci: fix two memleaks in budget_av_attach
- !7123 [sync] PR-7080:  drm: nv04: Fix out of bounds access
- !7145 [sync] PR-7044: v2  nfs: fix UAF in direct writes
- !7155 [sync] PR-7148:  scsi: sd: Fix sd_do_mode_sense() buffer length handling
- !7179  ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- !6978  ksmbd: validate payload size in ipc response
- !7098 [sync] PR-6818:  mm: memcg: fix stale protection of reclaim target memcg
- memcg: fix possible use-after-free in memcg_write_event_control()
- scsi: sd: Fix sd_do_mode_sense() buffer length handling
- nfs: fix UAF in direct writes
- !6764 [sync] PR-6680:  cifs: fix underflow in parse_server_interfaces()
- !6766 [sync] PR-6669:  NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- drm: nv04: Fix out of bounds access
- media: ttpci: fix two memleaks in budget_av_attach
- !7102 [sync] PR-7039:  USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7084 [sync] PR-7013:  media: edia: dvbdev: fix a use-after-free
- !7024 [sync] PR-6988:  clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- !6213 [sync] PR-6178:  CVE-2024-26812
- USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7009 [sync] PR-6959:  mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !7064 [sync] PR-7056:  scsi: qla2xxx: Fix command flush on cable pull
- mm: memcg: fix stale protection of reclaim target memcg
- !6946 [sync] PR-6840:  CVE-2023-52650
- media: edia: dvbdev: fix a use-after-free
- scsi: qla2xxx: Fix command flush on cable pull
- !6093 [sync] PR-5921:  ext4: fix double-free of blocks due to wrong extents moved_len
- !6090 [sync] PR-5977:  btrfs: dev-replace: properly validate device names
- !6096 [sync] PR-6029:  ceph: prevent use-after-free in encode_cap_msg()
- !7029 [sync] PR-6977:  wireguard: netlink: access device through ctx instead of peer
- drm/tegra: dsi: Add missing check for of_find_device_by_node
- wireguard: netlink: access device through ctx instead of peer
- !6986 [sync] PR-6964: v2  CVE-2024-27000
- clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !6691  quota: Fix potential NULL pointer dereference
- serial: core: fix kernel-doc for uart_port_unlock_irqrestore()
- serial: mxs-auart: add spinlock around changing cts state
- serial: core: Provide port lock wrappers
- !6885 [sync] PR-6740:  V2 cpuset: fix race between rebuild scheduler domains and hotplug work
- !6961 [sync] PR-6861:  media: dvb-frontends: avoid stack overflow warnings with clang
- ksmbd: validate payload size in ipc response
- !6912  pstore: inode: Only d_invalidate() is needed
- !6937 [sync] PR-6826:  fat: fix uninitialized field in nostale filehandles
- !6934 [sync] PR-6838:  fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- media: dvb-frontends: avoid stack overflow warnings with clang
- fat: fix uninitialized field in nostale filehandles
- fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- pstore: inode: Only d_invalidate() is needed
- cpuset: fix race between rebuild scheduler domains and hotplug work
- NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- cifs: fix underflow in parse_server_interfaces()
- quota: Fix potential NULL pointer dereference
- vfio/pci: Create persistent INTx handler
- vfio: Introduce interface to flush virqfd inject workqueue
- ceph: prevent use-after-free in encode_cap_msg()
- ext4: fix double-free of blocks due to wrong extents moved_len
- btrfs: dev-replace: properly validate device names
- net/sched: flower: Fix kabi change
- net/sched: flower: Fix chain template offload
- net: atlantic: Fix DMA mapping for PTP hwts ring</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.76.0.156" date="1716379200">- !7634  spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- !7642  hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- !7724  CVE-2024-27002
- !7706  pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- !7618 [sync] PR-5930:  RDMA/srpt: Support specifying the srpt_service_guid parameter
- !6243 [sync] PR-6082:  can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- !6153 [sync] PR-6020:  net/sched: act_mirred: use the backlog for mirred ingress
- !7621 [sync] PR-6259:  arp: Prevent overflow in arp_req_get().
- !7616 [sync] PR-5993:  ipv6: sr: fix possible use-after-free and null-ptr-deref
- !7613 [sync] PR-5996:  mptcp: fix double-free on socket dismantle
- !6223 [sync] PR-6074:  Fix CVE-2024-26787
- !7610 [sync] PR-6279:  Bluetooth: Avoid potential use-after-free in hci_error_reset
- !7380 [sync] PR-6085:  netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- !7377 [sync] PR-6086:  netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- !5984 [sync] PR-5852:  CVE-2024-26809
- !7708  bpf: Guard stack limits against 32bit overflow
- !7637  dm-crypt: don't modify the data when using authenticated encryption
- !7623 [sync] PR-6033:  gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- !7696  ext4: fix corruption during on-line resize
- !7703  pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- !7628 [sync] PR-5950:  RDMA/qedr: Fix qedr_create_user_qp error flow
- clk: mediatek: Do a runtime PM get on controllers during probe
- !6532 [sync] PR-6486:  devlink: fix possible use-after-free and memory leaks in devlink_init()
- !7554 [sync] PR-5530:  net: Fix CVE-2024-26641
- !7551 [sync] PR-7006:  wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7667 [sync] PR-7586:  powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- bpf: Guard stack limits against 32bit overflow
- pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- ext4: fix corruption during on-line resize
- !7604  cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7512 [sync] PR-7408:  backport important fix for broadcom net card
- !7510 [sync] PR-7407:  nvme-fc: do not wait in vain when unloading module
- !7513 [sync] PR-7406:  drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- !7508 [sync] PR-7402:  scsi: lpfc: Fix possible file string name overflow when updating firmware
- !7507 [sync] PR-7404:  scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- !7503 [sync] PR-7403:  scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- !7523 [sync] PR-7401:  nvme-core: check for too small lba shift
- !7499 [sync] PR-7396:  drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- !7493 [sync] PR-7398:  drm/amd/display: Fix memory leak in dm_sw_fini()
- !7490 [sync] PR-7399:  drm/amd/pm: fix a double-free in si_dpm_init
- !7496 [sync] PR-7397:  drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7590  drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7597 [sync] PR-7548:  btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7564  net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- dm-crypt: don't modify the data when using authenticated encryption
- spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- dm-crypt: don't modify the data when using authenticated encryption
- RDMA/qedr: Fix qedr_create_user_qp error flow
- gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- arp: Prevent overflow in arp_req_get().
- RDMA/srpt: Support specifying the srpt_service_guid parameter
- ipv6: sr: fix possible use-after-free and null-ptr-deref
- mptcp: fix double-free on socket dismantle
- Bluetooth: Avoid potential use-after-free in hci_error_reset
- cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7557 [sync] PR-7520:  drm/i915/gt: Reset queue_priority_hint on parking
- drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7363 [sync] PR-5491:  CVE-2024-26640
- !6553  fixup CVE-2024-26908
- !7535 v2  CVE-2024-26907
- net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- drm/i915/gt: Reset queue_priority_hint on parking
- ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()
- ip6_tunnel: use dev_sw_netstats_rx_add()
- wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7518 [sync] PR-7484:  fix CVE-2024-26661
- kernel-doc: fix struct_group_tagged() parsing
- uapi: propagate __struct_group() attributes to the container union
- RDMA/mlx5: Fix fortify source warning while accessing Eth segment
- uapi: stddef.h: Fix __DECLARE_FLEX_ARRAY for C++
- stddef: Introduce DECLARE_FLEX_ARRAY() helper
- uapi/linux/stddef.h: Add include guards
- stddef: Introduce struct_group() helper macro
- !7516 [sync] PR-7483:  Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- !7355  blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- !7347  PM / devfreq: Synchronize devfreq_monitor_[start/stop
- !7357  sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- !7443 [sync] PR-6037:  fix-CVE-2024-26706
- nvme-core: check for too small lba shift
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Add NULL test for 'timing generator' in 'dcn21_set_pipe()'
- !7486 [sync] PR-7476:  firewire: nosy: ensure user_length is taken into account when fetching packet contents
- Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- net/tg3: fix race condition in tg3_reset_task()
- net/tg3: resolve deadlock in tg3_reset_task() during EEH
- net: bnxt: fix a potential use-after-free in bnxt_init_tc
- net/bnx2x: Prevent access to a freed page in page_pool
- nvme-fc: do not wait in vain when unloading module
- scsi: lpfc: Fix possible file string name overflow when updating firmware
- scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- drm/amd/display: Fix memory leak in dm_sw_fini()
- drm/amd/pm: fix a double-free in si_dpm_init
- !7295  KVM: s390: vsie: fix race during shadow creation
- firewire: nosy: ensure user_length is taken into account when fetching packet contents
- !7257  netfilter: nf_tables: disallow anonymous set with timeout flag
- !7336  inet: read sk-&gt;sk_family once in inet_recv_error()
- !7329  tunnels: fix out of bounds access when building IPv6 PMTU error
- !7324  net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- !7311  btrfs: don't drop extent_map for free space inode on write error
- !7449 [sync] PR-5998:  net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- !7446 [sync] PR-6031:  nilfs2: fix potential bug in end_buffer_async_write
- !7276  llc: Drop support for ETH_P_TR_802_2.
- !7281  llc: make llc_ui_sendmsg() more robust against bonding changes
- !7457  netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7263  Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- !7479 [sync] PR-7424:  net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- !7343  ppp_async: limit MRU to 64K
- !5867 [sync] PR-5794:  um: time-travel: fix time corruption
- !7390 [sync] PR-5469:  wifi: iwlwifi: fix a memory corruption
- !7313  CVE-2024-26686
- !7301  nilfs2: fix data corruption in dsync block recovery for small block sizes
- !7298  powerpc/kasan: Fix addr error caused by page alignment
- !7274  binder: fix race between mmput() and do_exit()
- !7261  ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- !5623 [sync] PR-5566:  tracing: Ensure visibility when inserting an element into tracing_map
- !7241  SUNRPC: Fix a suspicious RCU usage warning
- !7231 [sync] PR-5460: v2  crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- !7240  bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- !7319  mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- !7467 [sync] PR-7394: v2  scsi: sr: Do not leak information in ioctl
- scsi: sr: Do not leak information in ioctl
- !7020 [sync] PR-6855:  KVM: Always flush async #PF workqueue when vCPU is being destroyed
- !7307  iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7427  net: gtp: Fix Use-After-Free in gtp_dellink
- !7431 [sync] PR-3972:  arm64: make cma=0 as default for openeuler
- net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- nilfs2: fix potential bug in end_buffer_async_write
- parisc/unaligned: Fix emulate_ldw() breakage
- parisc/unaligned: Rewrite 64-bit inline assembly of emulate_ldd()
- parisc: Fix random data corruption from exception handler
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_sth()
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_ldd()
- parisc/unaligned: Rewrite inline assembly of emulate_ldw()
- parisc: Mark ex_table entries 32-bit aligned in uaccess.h
- parisc: Fix some apparent put_user() failures
- parisc: Implement __get/put_kernel_nofault()
- parisc: Drop strnlen_user() in favour of generic version
- parisc: Switch user access functions to signal errors in r29 instead of r8
- parisc/unaligned: Rewrite inline assembly of emulate_ldh()
- parisc/unaligned: Use EFAULT fixup handler in unaligned handlers
- !7436 [sync] PR-7414:  clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- arm64: make cma=0 as default for openeuler
- net: gtp: Fix Use-After-Free in gtp_dellink
- !7383 [sync] PR-6428:  net/sched: flower: Fix unable to handle page fault bug in fl_init
- !7267  block/rnbd-srv: Check for unlikely string overflow
- wifi: iwlwifi: fix a memory corruption
- net/sched: flower: Fix unable to handle page fault bug in fl_init
- netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- tcp: add sanity checks to rx zerocopy
- net-zerocopy: Refactor frag-is-remappable test.
- sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- PM / devfreq: Synchronize devfreq_monitor_[start/stop]
- ppp_async: limit MRU to 64K
- inet: read sk-&gt;sk_family once in inet_recv_error()
- tunnels: fix out of bounds access when building IPv6 PMTU error
- net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- fs/proc: do_task_stat: use sig-&gt;stats_lock to gather the threads/children stats
- fs/proc: do_task_stat: use __for_each_thread()
- fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- exit: Use the correct exit_code in /proc/&lt;pid&gt;/stat
- btrfs: don't drop extent_map for free space inode on write error
- iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- nilfs2: fix data corruption in dsync block recovery for small block sizes
- powerpc/kasan: Fix addr error caused by page alignment
- KVM: s390: vsie: fix race during shadow creation
- llc: make llc_ui_sendmsg() more robust against bonding changes
- llc: Drop support for ETH_P_TR_802_2.
- binder: fix race between mmput() and do_exit()
- block/rnbd-srv: Check for unlikely string overflow
- Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- netfilter: nf_tables: disallow anonymous set with timeout flag
- SUNRPC: Fix a suspicious RCU usage warning
- bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- KVM: Always flush async #PF workqueue when vCPU is being destroyed
- x86/xen: Add some null pointer checking to smp.c
- devlink: fix possible use-after-free and memory leaks in devlink_init()
- mmc: mmci: stm32: fix DMA API overlapping mappings warning
- mmc: mmci: stm32: use a buffer for unaligned DMA requests
- net/sched: act_mirred: use the backlog for mirred ingress
- netfilter: nft_set_pipapo: release elements in clone only from destroy path
- netfilter: nft_set_pipapo: remove scratch_aligned pointer
- netfilter: nft_set_pipapo: add helper to release pcpu scratch area
- netfilter: nft_set_pipapo: store index in scratch maps
- um: time-travel: fix time corruption
- tracing: Ensure visibility when inserting an element into tracing_map</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.77.0.157" date="1716984000">- !8099  Fix CVE-2023-52854
- !8045  drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- !8148  pinctrl: single: fix potential NULL dereference
- !8157 [sync] PR-8017:  perf/core: Bail out early if the request AUX area is out of bound
- !8114 [sync] PR-8023:  fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !8093 [sync] PR-7980:  Fix CVE-2021-47455
- !8117 [sync] PR-8060:  soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- !7799  net-memcg: Fix scope of sockmem pressure indicators
- !8087 [sync] PR-8019:  pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8095 [sync] PR-7143:  media: usbtv: Remove useless locks in usbtv_video_free()
- !7134 [sync] PR-7092:  Squashfs: check the inode number is not the invalid value of zero
- perf/core: Bail out early if the request AUX area is out of bound
- !8132  scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- pinctrl: single: fix potential NULL dereference
- !8083 [sync] PR-6808:  CVE-2024-26923
- !8003 [sync] PR-7970:  fbmon: prevent division by zero in fb_videomode_from_videomode()
- scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- !6875 [sync] PR-6756:  vfio/fsl-mc: Block calling interrupt handler without trigger
- soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !7879 [sync] PR-7684:  dm snapshot: fix lockup in dm_exception_table_exit
- !8072 [sync] PR-8030:  netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- padata: Fix refcnt handling in padata_free_shell()
- padata: Convert from atomic_t to refcount_t on parallel_data-&gt;refcnt
- !7995  HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !8041  media: vidtv: mux: Add check and kfree for kstrdup
- media: usbtv: Remove useless locks in usbtv_video_free()
- ptp: fix code indentation issues
- ptp: Fix possible memory leak in ptp_clock_register()
- !7962  hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8020  media: bttv: fix use after free error due to btv-&gt;timeout timer
- af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc().
- af_unix: Fix garbage collector racing against connect()
- !8026 [sync] PR-7961:  net: atlantic: eliminate double free in error handling logic
- !7945  crypto: engine - fix crypto_queue backlog handling
- netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- !8034  clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- media: vidtv: mux: Add check and kfree for kstrdup
- clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- !8005 [sync] PR-7903:  virtio_ring : keep used_wrap_counter in
- net: atlantic: eliminate double free in error handling logic
- media: bttv: fix use after free error due to btv-&gt;timeout timer
- virtio_ring : keep used_wrap_counter in vq-&gt;last_used_idx
- fbmon: prevent division by zero in fb_videomode_from_videomode()
- HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !7954  media: vidtv: psi: Add check for kstrdup
- !7973 [sync] PR-7949:  drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- !7968 [sync] PR-7943: v2  netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7939 v2  pstore/platform: Add check for kstrdup
- drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7936 [sync] PR-7911:  ACPI: LPIT: Avoid u32 multiplication overflow
- !7850 [sync] PR-7576:  f2fs: compress: fix reserve_cblocks counting error when out of space
- !7862 [sync] PR-7757:  Fix CVE-2023-52656
- hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- media: vidtv: psi: Add check for kstrdup
- crypto: engine - fix crypto_queue backlog handling
- !7914 [sync] PR-7853:  net/mlx5e: fix a double-free in arfs_create_groups
- pstore/platform: Add check for kstrdup
- ACPI: LPIT: Avoid u32 multiplication overflow
- !7787 [sync] PR-7655: v3  KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7906 [sync] PR-7877: v4  eeprom: at24: fix memory corruption race condition
- net/mlx5e: fix a double-free in arfs_create_groups
- !7897  Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- eeprom: at24: fix memory corruption race condition
- !7796 [sync] PR-7743:  netrom: Fix data-races around sysctl_net_busy_read
- !7884 [sync] PR-7773:  Fix CVE-2023-52698
- Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- calipso: fix memory leak in netlbl_calipso_add_pass()
- netlabel: remove unused parameter in netlbl_netlink_auditinfo()
- net: netlabel: Fix kerneldoc warnings
- dm snapshot: fix lockup in dm_exception_table_exit
- !7859 [sync] PR-7846:  netrom: Fix a data-race around sysctl_netrom_transport_timeout
- io_uring: drop any code related to SCM_RIGHTS
- io_uring/unix: drop usage of io_uring socket
- netrom: Fix a data-race around sysctl_netrom_transport_timeout
- !7778 [sync] PR-7749: v2  wifi: iwlwifi: dbg-tlv: ensure NUL termination
- f2fs: compress: fix reserve_cblocks counting error when out of space
- !7829 [sync] PR-7779:  LoongArch: Define the __io_aw() hook as mmiowb()
- !7826 [sync] PR-7714:  CVE-2024-35936
- !7837 [sync] PR-7681:  xfs: three bug fix recently
- xfs: update dir3 leaf block metadata after swap
- xfs: ensure logflagsp is initialized in xfs_bmap_del_extent_real
- iomap: fix warning in xfs_iomap_write_delalloc_release()
- !7747  x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- !7819 [sync] PR-7734:  mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- LoongArch: Define the __io_aw() hook as mmiowb()
- btrfs: add missing mutex_unlock in btrfs_relocate_sys_chunks()
- btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks()
- mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- net-memcg: Fix scope of sockmem pressure indicators
- netrom: Fix data-races around sysctl_net_busy_read
- KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7768  net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: iwlwifi: dbg-tlv: ensure NUL termination
- !7711 [sync] PR-7579:  powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- !7755  wifi: ath11k: decrease MHI channel buffer length to 8KB
- net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: ath11k: decrease MHI channel buffer length to 8KB
- x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Squashfs: check the inode number is not the invalid value of zero
- vfio/fsl-mc: Block calling interrupt handler without trigger</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.78.0.158" date="1717588800">- !8594 [sync] PR-6990:  netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- !8591 [sync] PR-7174:  CVE-2022-48689
- !8595 [sync] PR-6939:  USB: core: Fix deadlock in usb_deauthorize_interface()
- !8554 [sync] PR-8395:  5.10: fix CVE-2024-35978
- !8364  perf: hisi: Fix use-after-free when register pmu fails
- !8606  smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- !7672  btrfs: send: handle path ref underflow in header iterate_inode_ref()
- !8597 [sync] PR-6393:  crypto: xilinx - call finalize with bh disabled
- !8514  net: ena: Fix incorrect descriptor free behavior
- !8563 [sync] PR-8110:  drm/client: Fully protect modes[
- smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- crypto: xilinx - call finalize with bh disabled
- USB: core: Fix deadlock in usb_deauthorize_interface()
- netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- tcp: TX zerocopy should not sense pfmemalloc status
- net: skbuff: update comment about pfmemalloc propagating
- net: introduce __skb_fill_page_desc_noacc
- tcp: factor out tcp_build_frag()
- !8505  CVE: CVE-2024-36015
- drm/client: Fully protect modes[] with dev-&gt;mode_config.mutex
- !8523  tty: vcc: Add check for kstrdup() in vcc_probe()
- !8487 [sync] PR-8397:  mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- !8486 [sync] PR-8373:  dma-direct: Leak pages on dma_set_decrypted() failure
- !8245 [sync] PR-7870:  CVE-2024-35995
- Bluetooth: Fix memory leak in hci_req_sync_complete()
- !8202  arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- !8408  pinctrl: core: delete incorrect free in pinctrl_enable()
- tty: vcc: Add check for kstrdup() in vcc_probe()
- net: ena: Fix incorrect descriptor free behavior
- !8457 [sync] PR-8416:  iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- !8501 [sync] PR-7889:  vt: fix unicode buffer corruption when deleting characters
- ppdev: Add an error check in register_device
- ppdev: Remove usage of the deprecated ida_simple_xx() API
- vt: fix unicode buffer corruption when deleting characters
- mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- dma-direct: Leak pages on dma_set_decrypted() failure
- !8429  drm/amdgpu: Fix even more out of bound writes from debugfs
- !8340  soc: qcom: llcc: Handle a second device without data corruption
- !8369  efi/capsule-loader: fix incorrect allocation size
- !8312 [sync] PR-8039: v2  dynamic_hugetlb: backport some bugfix
- !8451 [sync] PR-8342:  net/mlx5: Properly link new fs rules into the tree
- !8293  drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- net/mlx5: Properly link new fs rules into the tree
- !8179  jfs: fix array-index-out-of-bounds in diAlloc
- !8167 v2  mmc: sdio: fix possible resource leaks in some error paths
- !8346 [sync] PR-8248:  gfs2: ignore negated quota changes
- !8331 [sync] PR-8254:  sysv: don't call sb_bread() with pointers_lock held
- !8375 [sync] PR-8306:  mptcp: ensure tx skbs always have the MPTCP ext
- drm/amdgpu: Fix even more out of bound writes from debugfs
- !8391 [sync] PR-8109:  vhost-vdpa: fix use after free in vhost_vdpa_probe()
- pinctrl: core: delete incorrect free in pinctrl_enable()
- !8370  locking/ww_mutex/test: Fix potential workqueue corruption
- !8311  drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8334  wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- !8317  net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8235 [sync] PR-8054:  CVE-2023-52669
- !8380 [sync] PR-8212:  fix CVE-2024-35877
- vhost-vdpa: fix use after free in vhost_vdpa_probe()
- !8294  CVE-2023-52735
- x86/mm/pat: fix VM_PAT handling in COW mappings
- !8196  clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- mptcp: ensure tx skbs always have the MPTCP ext
- locking/ww_mutex/test: Fix potential workqueue corruption
- efi/capsule-loader: fix incorrect allocation size
- perf: hisi: Fix use-after-free when register pmu fails
- !7776 [sync] PR-7717:  CVE-2023-52655
- !8323 [sync] PR-8219:  tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8273  ALSA: hda: Do not unset preset when cleaning up codec
- !8269  drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- !8251 v2  CVE-2024-35956
- gfs2: ignore negated quota changes
- soc: qcom: llcc: Handle a second device without data corruption
- wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- sysv: don't call sb_bread() with pointers_lock held
- tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8277  usb: udc: remove warning when queue disabled ep
- net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8289 [sync] PR-8150:  mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !8265 [sync] PR-8228:  ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- mm/dynamic_hugetlb: refine error info in the destruction
- mm/dynamic_hugetlb: make free_huge_page_to_dhugetlb_pool irq safe
- mm/dynamic_hugetlb: check NULL pointer for early parameter
- mm/dynamic_hugetlb: add lru_add_drain_all() before migration
- mm/dynamic_hugetlb: add cond_resched() in hpool_merge_page()
- mm/dynamic_hugetlb: reduce the number of migration attempts
- mm/dpool: Use helper function to lock/unlock
- drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8231  CVE-2023-52804
- bpf, sockmap: Check for any of tcp_bpf_prots when cloning a listener
- bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself
- drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !7833 [sync] PR-7599:  irqchip/gic-v3-its: Prevent double free on error
- !8259 v5  can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- usb: udc: remove warning when queue disabled ep
- ALSA: hda: Do not unset preset when cleaning up codec
- drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- !7855  clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- btrfs: qgroup: fix qgroup prealloc rsv leak in subvolume operations
- btrfs: fix anon_dev leak in create_subvol()
- ACPI: CPPC: Fix access width used for PCC registers
- ACPI: CPPC: Fix bit_offset shift in MASK_VAL() macro
- ACPI: CPPC: Use access_width over bit_width for system memory accesses
- ACPI: CPPC: Fix up I/O port access in cpc_read()
- ACPI: CPPC: Implement support for SystemIO registers
- crypto: s390/aes - Fix buffer overread in CTR mode
- fs/jfs: Add validity check for db_maxag and db_agpref
- fs: jfs: fix shift-out-of-bounds in dbAllocAG
- !8224  ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- !8125 [sync] PR-8042:  xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- jfs: fix array-index-out-of-bounds in diAlloc
- mmc: sdio: fix possible resource leaks in some error paths
- xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- irqchip/gic-v3-its: Prevent double free on error
- usb: aqc111: check packet for fixup for true limit
- btrfs: send: handle path ref underflow in header iterate_inode_ref()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.79.0.159" date="1718193600">- !8950  aio: fix mremap after fork null-deref
- !8948  CVE-2022-48652
- !8866  ipv6: prevent NULL dereference in ip6_output()
- !8780  smb: client: fix UAF in smb2_reconnect_server()
- !8859  net/smc: avoid data corruption caused by decline
- !8722 v2  SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !8964  Fix CVE-2024-35915
- !8963  Fix CVE-2024-35915
- !8735  mptcp: ensure snd_nxt is properly initialized on connect
- !8761  tipc: fix UAF in error path
- !8741  octeontx2-af: avoid off-by-one read from userspace
- !8953  powerpc/powernv: Add a null pointer check in opal_event_init()
- !8685  mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- !8967  Fix CVE-2024-36949
- !8861  blk-iocost: do not WARN if iocg was already offlined
- !8841 v2  IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- !8945  usb: typec: ucsi: Limit read size on v1.2
- !8905  ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8709 [sync] PR-8046:  block: prevent division by zero in blk_rq_stat_sum()
- !8839  blk-iocost: avoid out of bounds shift
- !8857  PCI/PM: Drain runtime-idle callbacks before driver removal
- amd/amdkfd: sync all devices to wait all processes being evicted
- drm/amdkfd: Rework kfd_locked handling
- !8911  net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- !8915  gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- !8788 [sync] PR-8558:  xen-netfront: Add missing skb_mark_for_recycle
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- powerpc/powernv: Add a null pointer check in opal_event_init()
- aio: fix mremap after fork null-deref
- ice: Fix crash by keep old cfg when update TCs more than queues
- ice: ethtool: Prohibit improper channel config for DCB
- !8880  net: core: reject skb_copy(_expand) for fraglist GSO skbs
- usb: typec: ucsi: Limit read size on v1.2
- !8892  net: fix out-of-bounds access in ops_init
- !8810  net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8672  fix CVE-2024-36021 and CVE-2024-36900
- !8886  CVE-2024-36933
- gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8755  drm/amd/display: Avoid NULL dereference of timing generator
- !8754  pwm: Fix double shift bug
- !8850  ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- net: fix out-of-bounds access in ops_init
- !8665  phonet/pep: fix racy skb_queue_empty() use
- nsh: Restore skb-&gt;{protocol,data,mac_header} for outer header in nsh_gso_segment().
- net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment()
- net: core: reject skb_copy(_expand) for fraglist GSO skbs
- ipv6: prevent NULL dereference in ip6_output()
- blk-iocost: do not WARN if iocg was already offlined
- net/smc: avoid data corruption caused by decline
- PCI/PM: Drain runtime-idle callbacks before driver removal
- ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- !8687  tcp: properly terminate timers for kernel sockets
- !8630  erspan: make sure erspan_base_hdr is present in skb-&gt;head
- IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- blk-iocost: avoid out of bounds shift
- !7988 [sync] PR-7960:  ipv6: Fix infinite recursion in fib6_dump_done().
- !8388 [sync] PR-8300:  ipvlan: add ipvlan_route_v6_outbound() helper
- !8282 [sync] PR-8133:  fix CVE-2021-47265
- !7925 [sync] PR-7741:  ipv4: check for NULL idev in ip_route_use_hint()
- !8724  tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- !8480  scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- !8622  fs/9p: only translate RWX permissions for plain 9P2000
- net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8728  net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8790  Bluetooth: SCO: Fix not validating setsockopt user input
- !8680  rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- !8713 [sync] PR-8583:  mmc: sdhci-msm: pervent access to suspended controller
- !8670  CVE-2024-35854
- Bluetooth: SCO: Fix not validating setsockopt user input
- !8696  clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- !8653 v3  clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- xen-netfront: Add missing skb_mark_for_recycle
- !8571  jfs: fix two array-index-out-of-bounds issuse
- !8356  nilfs2: fix underflow in second superblock position calculations
- !8592  geneve: fix header validation in geneve[6
- !8531  gpiolib: cdev: fix uninitialised kfifo
- smb: client: fix UAF in smb2_reconnect_server()
- !8631 [sync] PR-8519:  mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- tipc: fix UAF in error path
- !8751  ubifs: Check @c-&gt;dirty_[n|p
- drm/amd/display: Avoid NULL dereference of timing generator
- pwm: Fix double shift bug
- !8633 [sync] PR-8425:  CVE-2023-52677
- ubifs: Check @c-&gt;dirty_[n|p]n_cnt and @c-&gt;nroot state under @c-&gt;lp_mutex
- octeontx2-af: avoid off-by-one read from userspace
- !8669  wifi: ath11k: fix dfs radar event locking
- !8619  CVE-2024-35896
- !8608  CVE-2024-35895
- mptcp: ensure snd_nxt is properly initialized on connect
- !8659  wifi: ath11k: fix htt pktlog locking
- !8587  fix CVE-2021-47558
- net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8569  fix CVE-2024-36906
- tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !7933  bpf: Protect against int overflow for stack access size
- !8627 [sync] PR-8561:  mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- !8625 [sync] PR-8497:  Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- mmc: sdhci-msm: pervent access to suspended controller
- !8572  xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- block: prevent division by zero in blk_rq_stat_sum()
- clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- tcp: properly terminate timers for kernel sockets
- mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- net: hns3: fix kernel crash when devlink reload during initialization
- net: hns3: release PTP resources if pf initialization failed
- net: hns3: fix kernel crash when devlink reload during vf initialization
- net: hns3: fix kernel crash when devlink reload during pf initialization
- mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash
- wifi: ath11k: fix dfs radar event locking
- phonet/pep: fix racy skb_queue_empty() use
- wifi: ath11k: fix htt pktlog locking
- clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- !8537  scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- !8538  drm/amdgpu: Fix potential null pointer derefernce
- !8540  s390/dasd: protect device queue against concurrent access
- !8462  i2c: smbus: fix NULL function pointer dereference
- !8432  platform/x86: wmi: Fix opening of char device
- riscv: Check if the code to patch lies in the exit section
- mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- erspan: make sure erspan_base_hdr is present in skb-&gt;head
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- fs/9p: only translate RWX permissions for plain 9P2000
- netfilter: complete validation of user input
- netfilter: validate user input for expected length
- Revert "bpf, sockmap: Prevent lock inversion deadlock in map delete elem"
- bpf: Allow delete from sockmap/sockhash only if update is allowed
- bpf, sockmap: Prevent lock inversion deadlock in map delete elem
- geneve: fix header validation in geneve[6]_xmit_skb
- net: stmmac: Disable Tx queues when reconfiguring the interface
- xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- jfs: fix array-index-out-of-bounds in dbFindLeaf
- fs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev
- ARM: 9381/1: kasan: clear stale stack poison
- s390/dasd: protect device queue against concurrent access
- drm/amdgpu: Fix potential null pointer derefernce
- scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- gpiolib: cdev: fix uninitialised kfifo
- scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- i2c: smbus: fix NULL function pointer dereference
- platform/x86: wmi: Fix opening of char device
- ipvlan: add ipvlan_route_v6_outbound() helper
- nilfs2: fix underflow in second superblock position calculations
- RDMA: Verify port when creating flow rule
- IB/mlx4: Use port iterator and validation APIs
- ipv6: Fix infinite recursion in fib6_dump_done().
- bpf: Protect against int overflow for stack access size
- ipv4: check for NULL idev in ip_route_use_hint()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.80.0.160" date="1718798400">- !9093 v2  ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9031  bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- !9065  afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- !8933  Fix CVE-2023-52732
- !8927 [sync] PR-8222:  Fix CVE-2023-52672
- !9172 [sync] PR-7041:  netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
- !9171 [sync] PR-6994: v2  net/mlx5e: Prevent deadlock while disabling aRFS
- !8733  batman-adv: Avoid infinite loop trying to resize local TT
- !7374 [sync] PR-6879:  net/smc: Fix possible access to freed memory in link clear
- !9098  Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
- net/mlx5e: Prevent deadlock while disabling aRFS
- !9165  genirq: introduce handle_fasteoi_edge_irq flow handler
- genirq: introduce handle_fasteoi_edge_irq for phytium
- genirq: introduce handle_fasteoi_edge_irq flow handler
- !9139 v2  CVE-2024-36971
- !8495  rpmsg: virtio: Free driver_override when rpmsg_remove()
- !9127  hsr: Prevent use after free in prp_create_tagged_frame()
- !9075  Fix UAF problem of hpool
- !9132  mm: swap: fix race between free_swap_and_cache() and swapoff()
- !9130  ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- !9069  Bluetooth: RFCOMM: Fix not validating setsockopt user input
- !8970  mmc: mmc_spi: fix error handling in mmc_spi_probe()
- !8977 [sync] PR-8584:  virtio-blk: fix implicit overflow on virtio_max_dma_size
- !8701  wifi: cfg80211: check A-MSDU format more carefully
- net: fix kabi breakage in struct dst_ops
- net: fix __dst_negative_advice() race
- net: annotate data-races around sk-&gt;sk_dst_pending_confirm
- mm: swap: fix race between free_swap_and_cache() and swapoff()
- ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- hsr: Prevent use after free in prp_create_tagged_frame()
- !9002  scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- !9056  drm/panel: fix a possible null pointer dereference
- !9054  soc: fsl: qbman: Use raw spinlock for cgr_lock
- !8939  clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- !8952  ACPI: video: check for error while searching for backlight device parent
- !8986 [sync] PR-8639:  s390/qeth: Fix kernel panic after setting hsuid
- Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- !8714  Fix page corruption caused by racy check in __free_pages
- ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9080  Bluetooth: L2CAP: Fix not validating setsockopt user input
- Bluetooth: L2CAP: Fix not validating setsockopt user input
- mm/dynamic_hugetlb: use rcu lock to protect hpool
- mm/dynamic_hugetlb: simplify the refcount code
- !9072 [sync] PR-9015:  CVE-2024-36953
- !9071 [sync] PR-9014:  drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr()
- KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id
- drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- Bluetooth: RFCOMM: Fix not validating setsockopt user input
- afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- !8947 [sync] PR-6800:  block: fix overflow in blk_ioctl_discard()
- !9052  CVE-2024-35796
- drm/panel: fix a possible null pointer dereference
- soc: fsl: qbman: Use raw spinlock for cgr_lock
- !9021  wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- net: ll_temac: platform_get_resource replaced by wrong function
- !9048  IB/hfi1: Restore allocated resources on failed copyout
- IB/hfi1: Restore allocated resources on failed copyout
- !9028  tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- !8830  Fix CVE-2024-35951
- !9009  fix CVE-2024-35839
- !9008  tipc: fix a possible memleak in tipc_buf_append
- !8721  CVE-2024-35887
- !8876  drm/vmwgfx: Fix invalid reads in fence signaled events
- !8884  scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- !8922  hugetlbfs: fix hugetlbfs_statfs() locking
- bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- netfilter: bridge: replace physindev with physinif in nf_bridge_info
- netfilter: propagate net to nf_bridge_get_physindev
- netfilter: nfnetlink_log: use proper helper for fetching physinif
- !8662  usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group
- tipc: fix a possible memleak in tipc_buf_append
- !8617 [sync] PR-8472:  fix CVE-2024-27415
- !8983  fix CVE-2024-36905
- scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- s390/qeth: Fix kernel panic after setting hsuid
- net: relax socket state check at accept time.
- tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets
- virtio-blk: fix implicit overflow on virtio_max_dma_size
- mmc: mmc_spi: fix error handling in mmc_spi_probe()
- ACPI: video: check for error while searching for backlight device parent
- block: fix overflow in blk_ioctl_discard()
- clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- ceph: blocklist the kclient when receiving corrupted snap trace
- ceph: shut down access to inode when async create fails
- ceph: refactor remove_session_caps_cb
- ceph: fix auth cap handling logic in remove_session_caps_cb
- ceph: drop private list from remove_session_caps_cb
- pipe: wakeup wr_wait after setting max_usage
- fs/pipe: move check to pipe_has_watch_queue()
- hugetlbfs: fix hugetlbfs_statfs() locking
- scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- drm/vmwgfx: Fix invalid reads in fence signaled events
- drm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr()
- drm/panfrost: Fix the panfrost_mmu_map_fault_addr() error path
- batman-adv: Avoid infinite loop trying to resize local TT
- ax25: fix use-after-free bugs caused by ax25_ds_del_timer
- Fix page corruption caused by racy check in __free_pages
- wifi: cfg80211: check A-MSDU format more carefully
- usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group
- netfilter: br_netfilter: skip conntrack input hook for promisc packets
- netfilter: bridge: confirm multicast packets before passing them up the stack
- rpmsg: virtio: Free driver_override when rpmsg_remove()
- net/smc: Fix possible access to freed memory in link clear</changelog>
</package>
<package pkgid="0ad9a66a4e24619afecf00ead0317183697c5ac10c02d3e7b508604e2b84dd5e" name="kernel" arch="src">
  <version epoch="0" ver="5.10.0" rel="136.82.0.163.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.74.0.154" date="1715169600">- !6426 [sync] PR-6291:  aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- !6902  bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- !6920  bpf: Fix hashtab overflow check on 32-bit arches
- !6926  firmware: arm_scmi: Harden accesses to the reset domains
- !6922  bpf: Fix stackmap overflow check on 32-bit arches
- !6864 [sync] PR-6835:  kprobes: Fix check for probe enabled in kill_kprobe()
- !6898 [sync] PR-6592:  net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- firmware: arm_scmi: Harden accesses to the reset domains
- bpf: Fix stackmap overflow check on 32-bit arches
- bpf: Fix hashtab overflow check on 32-bit arches
- bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- !6644 [sync] PR-6623:  amdkfd: use calloc instead of kzalloc to avoid integer overflow
- kprobes: Fix check for probe enabled in kill_kprobe()
- !6388 [sync] PR-6202:  ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- !6628 [sync] PR-6485:  CVE-2024-26843
- !6752 [sync] PR-6677: v3  olk-5.10: bugfix for mm
- mm/madvise: fix potential pte_unmap_unlock pte error
- mm/page_alloc: always attempt to allocate at least one page during bulk allocation
- !6505  cachefiles: fix memory leak in cachefiles_add_cache()
- !6687 [sync] PR-6580:  drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- !6637 [sync] PR-6561:  md: fix kmemleak of rdev-&gt;serial
- amdkfd: use calloc instead of kzalloc to avoid integer overflow
- !6598 [sync] PR-6584:  ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6607 [sync] PR-6579:  media: rc: bpf attach/detach requires write permission
- !6606 [sync] PR-6568:  IB/hfi1: Fix a memleak in init_credit_return
- !6614 [sync] PR-6543:  net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6603 [sync] PR-6520:  firmware: arm_scmi: Fix double free in SMC transport cleanup path
- md: fix kmemleak of rdev-&gt;serial
- firmware: arm_scmi: Fix double free in SMC transport cleanup path
- efi: runtime: Fix potential overflow of soft-reserved region size
- !6249  ubi: Check for too small LEB size in VTBL code
- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6449 [sync] PR-6281: v2  net/mlx5: Update error handler for UCTX and UMEM
- media: rc: bpf attach/detach requires write permission
- IB/hfi1: Fix a memleak in init_credit_return
- ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6476  do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- !6575 [sync] PR-6417:  media: pvrusb2: fix uaf in pvr2_context_set_notify
- media: pvrusb2: fix uaf in pvr2_context_set_notify
- cachefiles: fix memory leak in cachefiles_add_cache()
- do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- net/mlx5: Update error handler for UCTX and UMEM
- aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- ubi: Check for too small LEB size in VTBL code</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.75.0.155" date="1715774400">- !6039 [sync] PR-6006:  fix CVE-2024-26669
- !5882 [sync] PR-5751:  net: atlantic: Fix DMA mapping for PTP hwts ring
- !7340  netfilter: nft_limit: reject configurations that cause integer overflow
- !7253  netfilter: nf_tables: disallow timeout for anonymous sets
- netfilter: nft_limit: reject configurations that cause integer overflow
- netfilter: nf_tables: disallow timeout for anonymous sets
- !7161 [sync] PR-6809:  memcg: fix possible use-after-free in memcg_write_event_control()
- !7121 [sync] PR-7086:  media: ttpci: fix two memleaks in budget_av_attach
- !7123 [sync] PR-7080:  drm: nv04: Fix out of bounds access
- !7145 [sync] PR-7044: v2  nfs: fix UAF in direct writes
- !7155 [sync] PR-7148:  scsi: sd: Fix sd_do_mode_sense() buffer length handling
- !7179  ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- !6978  ksmbd: validate payload size in ipc response
- !7098 [sync] PR-6818:  mm: memcg: fix stale protection of reclaim target memcg
- memcg: fix possible use-after-free in memcg_write_event_control()
- scsi: sd: Fix sd_do_mode_sense() buffer length handling
- nfs: fix UAF in direct writes
- !6764 [sync] PR-6680:  cifs: fix underflow in parse_server_interfaces()
- !6766 [sync] PR-6669:  NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- drm: nv04: Fix out of bounds access
- media: ttpci: fix two memleaks in budget_av_attach
- !7102 [sync] PR-7039:  USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7084 [sync] PR-7013:  media: edia: dvbdev: fix a use-after-free
- !7024 [sync] PR-6988:  clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- !6213 [sync] PR-6178:  CVE-2024-26812
- USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7009 [sync] PR-6959:  mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !7064 [sync] PR-7056:  scsi: qla2xxx: Fix command flush on cable pull
- mm: memcg: fix stale protection of reclaim target memcg
- !6946 [sync] PR-6840:  CVE-2023-52650
- media: edia: dvbdev: fix a use-after-free
- scsi: qla2xxx: Fix command flush on cable pull
- !6093 [sync] PR-5921:  ext4: fix double-free of blocks due to wrong extents moved_len
- !6090 [sync] PR-5977:  btrfs: dev-replace: properly validate device names
- !6096 [sync] PR-6029:  ceph: prevent use-after-free in encode_cap_msg()
- !7029 [sync] PR-6977:  wireguard: netlink: access device through ctx instead of peer
- drm/tegra: dsi: Add missing check for of_find_device_by_node
- wireguard: netlink: access device through ctx instead of peer
- !6986 [sync] PR-6964: v2  CVE-2024-27000
- clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !6691  quota: Fix potential NULL pointer dereference
- serial: core: fix kernel-doc for uart_port_unlock_irqrestore()
- serial: mxs-auart: add spinlock around changing cts state
- serial: core: Provide port lock wrappers
- !6885 [sync] PR-6740:  V2 cpuset: fix race between rebuild scheduler domains and hotplug work
- !6961 [sync] PR-6861:  media: dvb-frontends: avoid stack overflow warnings with clang
- ksmbd: validate payload size in ipc response
- !6912  pstore: inode: Only d_invalidate() is needed
- !6937 [sync] PR-6826:  fat: fix uninitialized field in nostale filehandles
- !6934 [sync] PR-6838:  fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- media: dvb-frontends: avoid stack overflow warnings with clang
- fat: fix uninitialized field in nostale filehandles
- fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- pstore: inode: Only d_invalidate() is needed
- cpuset: fix race between rebuild scheduler domains and hotplug work
- NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- cifs: fix underflow in parse_server_interfaces()
- quota: Fix potential NULL pointer dereference
- vfio/pci: Create persistent INTx handler
- vfio: Introduce interface to flush virqfd inject workqueue
- ceph: prevent use-after-free in encode_cap_msg()
- ext4: fix double-free of blocks due to wrong extents moved_len
- btrfs: dev-replace: properly validate device names
- net/sched: flower: Fix kabi change
- net/sched: flower: Fix chain template offload
- net: atlantic: Fix DMA mapping for PTP hwts ring</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.76.0.156" date="1716379200">- !7634  spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- !7642  hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- !7724  CVE-2024-27002
- !7706  pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- !7618 [sync] PR-5930:  RDMA/srpt: Support specifying the srpt_service_guid parameter
- !6243 [sync] PR-6082:  can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- !6153 [sync] PR-6020:  net/sched: act_mirred: use the backlog for mirred ingress
- !7621 [sync] PR-6259:  arp: Prevent overflow in arp_req_get().
- !7616 [sync] PR-5993:  ipv6: sr: fix possible use-after-free and null-ptr-deref
- !7613 [sync] PR-5996:  mptcp: fix double-free on socket dismantle
- !6223 [sync] PR-6074:  Fix CVE-2024-26787
- !7610 [sync] PR-6279:  Bluetooth: Avoid potential use-after-free in hci_error_reset
- !7380 [sync] PR-6085:  netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- !7377 [sync] PR-6086:  netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- !5984 [sync] PR-5852:  CVE-2024-26809
- !7708  bpf: Guard stack limits against 32bit overflow
- !7637  dm-crypt: don't modify the data when using authenticated encryption
- !7623 [sync] PR-6033:  gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- !7696  ext4: fix corruption during on-line resize
- !7703  pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- !7628 [sync] PR-5950:  RDMA/qedr: Fix qedr_create_user_qp error flow
- clk: mediatek: Do a runtime PM get on controllers during probe
- !6532 [sync] PR-6486:  devlink: fix possible use-after-free and memory leaks in devlink_init()
- !7554 [sync] PR-5530:  net: Fix CVE-2024-26641
- !7551 [sync] PR-7006:  wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7667 [sync] PR-7586:  powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- bpf: Guard stack limits against 32bit overflow
- pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- ext4: fix corruption during on-line resize
- !7604  cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7512 [sync] PR-7408:  backport important fix for broadcom net card
- !7510 [sync] PR-7407:  nvme-fc: do not wait in vain when unloading module
- !7513 [sync] PR-7406:  drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- !7508 [sync] PR-7402:  scsi: lpfc: Fix possible file string name overflow when updating firmware
- !7507 [sync] PR-7404:  scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- !7503 [sync] PR-7403:  scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- !7523 [sync] PR-7401:  nvme-core: check for too small lba shift
- !7499 [sync] PR-7396:  drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- !7493 [sync] PR-7398:  drm/amd/display: Fix memory leak in dm_sw_fini()
- !7490 [sync] PR-7399:  drm/amd/pm: fix a double-free in si_dpm_init
- !7496 [sync] PR-7397:  drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7590  drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7597 [sync] PR-7548:  btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7564  net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- dm-crypt: don't modify the data when using authenticated encryption
- spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- dm-crypt: don't modify the data when using authenticated encryption
- RDMA/qedr: Fix qedr_create_user_qp error flow
- gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- arp: Prevent overflow in arp_req_get().
- RDMA/srpt: Support specifying the srpt_service_guid parameter
- ipv6: sr: fix possible use-after-free and null-ptr-deref
- mptcp: fix double-free on socket dismantle
- Bluetooth: Avoid potential use-after-free in hci_error_reset
- cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7557 [sync] PR-7520:  drm/i915/gt: Reset queue_priority_hint on parking
- drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7363 [sync] PR-5491:  CVE-2024-26640
- !6553  fixup CVE-2024-26908
- !7535 v2  CVE-2024-26907
- net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- drm/i915/gt: Reset queue_priority_hint on parking
- ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()
- ip6_tunnel: use dev_sw_netstats_rx_add()
- wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7518 [sync] PR-7484:  fix CVE-2024-26661
- kernel-doc: fix struct_group_tagged() parsing
- uapi: propagate __struct_group() attributes to the container union
- RDMA/mlx5: Fix fortify source warning while accessing Eth segment
- uapi: stddef.h: Fix __DECLARE_FLEX_ARRAY for C++
- stddef: Introduce DECLARE_FLEX_ARRAY() helper
- uapi/linux/stddef.h: Add include guards
- stddef: Introduce struct_group() helper macro
- !7516 [sync] PR-7483:  Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- !7355  blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- !7347  PM / devfreq: Synchronize devfreq_monitor_[start/stop
- !7357  sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- !7443 [sync] PR-6037:  fix-CVE-2024-26706
- nvme-core: check for too small lba shift
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Add NULL test for 'timing generator' in 'dcn21_set_pipe()'
- !7486 [sync] PR-7476:  firewire: nosy: ensure user_length is taken into account when fetching packet contents
- Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- net/tg3: fix race condition in tg3_reset_task()
- net/tg3: resolve deadlock in tg3_reset_task() during EEH
- net: bnxt: fix a potential use-after-free in bnxt_init_tc
- net/bnx2x: Prevent access to a freed page in page_pool
- nvme-fc: do not wait in vain when unloading module
- scsi: lpfc: Fix possible file string name overflow when updating firmware
- scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- drm/amd/display: Fix memory leak in dm_sw_fini()
- drm/amd/pm: fix a double-free in si_dpm_init
- !7295  KVM: s390: vsie: fix race during shadow creation
- firewire: nosy: ensure user_length is taken into account when fetching packet contents
- !7257  netfilter: nf_tables: disallow anonymous set with timeout flag
- !7336  inet: read sk-&gt;sk_family once in inet_recv_error()
- !7329  tunnels: fix out of bounds access when building IPv6 PMTU error
- !7324  net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- !7311  btrfs: don't drop extent_map for free space inode on write error
- !7449 [sync] PR-5998:  net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- !7446 [sync] PR-6031:  nilfs2: fix potential bug in end_buffer_async_write
- !7276  llc: Drop support for ETH_P_TR_802_2.
- !7281  llc: make llc_ui_sendmsg() more robust against bonding changes
- !7457  netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7263  Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- !7479 [sync] PR-7424:  net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- !7343  ppp_async: limit MRU to 64K
- !5867 [sync] PR-5794:  um: time-travel: fix time corruption
- !7390 [sync] PR-5469:  wifi: iwlwifi: fix a memory corruption
- !7313  CVE-2024-26686
- !7301  nilfs2: fix data corruption in dsync block recovery for small block sizes
- !7298  powerpc/kasan: Fix addr error caused by page alignment
- !7274  binder: fix race between mmput() and do_exit()
- !7261  ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- !5623 [sync] PR-5566:  tracing: Ensure visibility when inserting an element into tracing_map
- !7241  SUNRPC: Fix a suspicious RCU usage warning
- !7231 [sync] PR-5460: v2  crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- !7240  bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- !7319  mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- !7467 [sync] PR-7394: v2  scsi: sr: Do not leak information in ioctl
- scsi: sr: Do not leak information in ioctl
- !7020 [sync] PR-6855:  KVM: Always flush async #PF workqueue when vCPU is being destroyed
- !7307  iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7427  net: gtp: Fix Use-After-Free in gtp_dellink
- !7431 [sync] PR-3972:  arm64: make cma=0 as default for openeuler
- net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- nilfs2: fix potential bug in end_buffer_async_write
- parisc/unaligned: Fix emulate_ldw() breakage
- parisc/unaligned: Rewrite 64-bit inline assembly of emulate_ldd()
- parisc: Fix random data corruption from exception handler
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_sth()
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_ldd()
- parisc/unaligned: Rewrite inline assembly of emulate_ldw()
- parisc: Mark ex_table entries 32-bit aligned in uaccess.h
- parisc: Fix some apparent put_user() failures
- parisc: Implement __get/put_kernel_nofault()
- parisc: Drop strnlen_user() in favour of generic version
- parisc: Switch user access functions to signal errors in r29 instead of r8
- parisc/unaligned: Rewrite inline assembly of emulate_ldh()
- parisc/unaligned: Use EFAULT fixup handler in unaligned handlers
- !7436 [sync] PR-7414:  clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- arm64: make cma=0 as default for openeuler
- net: gtp: Fix Use-After-Free in gtp_dellink
- !7383 [sync] PR-6428:  net/sched: flower: Fix unable to handle page fault bug in fl_init
- !7267  block/rnbd-srv: Check for unlikely string overflow
- wifi: iwlwifi: fix a memory corruption
- net/sched: flower: Fix unable to handle page fault bug in fl_init
- netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- tcp: add sanity checks to rx zerocopy
- net-zerocopy: Refactor frag-is-remappable test.
- sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- PM / devfreq: Synchronize devfreq_monitor_[start/stop]
- ppp_async: limit MRU to 64K
- inet: read sk-&gt;sk_family once in inet_recv_error()
- tunnels: fix out of bounds access when building IPv6 PMTU error
- net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- fs/proc: do_task_stat: use sig-&gt;stats_lock to gather the threads/children stats
- fs/proc: do_task_stat: use __for_each_thread()
- fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- exit: Use the correct exit_code in /proc/&lt;pid&gt;/stat
- btrfs: don't drop extent_map for free space inode on write error
- iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- nilfs2: fix data corruption in dsync block recovery for small block sizes
- powerpc/kasan: Fix addr error caused by page alignment
- KVM: s390: vsie: fix race during shadow creation
- llc: make llc_ui_sendmsg() more robust against bonding changes
- llc: Drop support for ETH_P_TR_802_2.
- binder: fix race between mmput() and do_exit()
- block/rnbd-srv: Check for unlikely string overflow
- Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- netfilter: nf_tables: disallow anonymous set with timeout flag
- SUNRPC: Fix a suspicious RCU usage warning
- bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- KVM: Always flush async #PF workqueue when vCPU is being destroyed
- x86/xen: Add some null pointer checking to smp.c
- devlink: fix possible use-after-free and memory leaks in devlink_init()
- mmc: mmci: stm32: fix DMA API overlapping mappings warning
- mmc: mmci: stm32: use a buffer for unaligned DMA requests
- net/sched: act_mirred: use the backlog for mirred ingress
- netfilter: nft_set_pipapo: release elements in clone only from destroy path
- netfilter: nft_set_pipapo: remove scratch_aligned pointer
- netfilter: nft_set_pipapo: add helper to release pcpu scratch area
- netfilter: nft_set_pipapo: store index in scratch maps
- um: time-travel: fix time corruption
- tracing: Ensure visibility when inserting an element into tracing_map</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.77.0.157" date="1716984000">- !8099  Fix CVE-2023-52854
- !8045  drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- !8148  pinctrl: single: fix potential NULL dereference
- !8157 [sync] PR-8017:  perf/core: Bail out early if the request AUX area is out of bound
- !8114 [sync] PR-8023:  fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !8093 [sync] PR-7980:  Fix CVE-2021-47455
- !8117 [sync] PR-8060:  soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- !7799  net-memcg: Fix scope of sockmem pressure indicators
- !8087 [sync] PR-8019:  pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8095 [sync] PR-7143:  media: usbtv: Remove useless locks in usbtv_video_free()
- !7134 [sync] PR-7092:  Squashfs: check the inode number is not the invalid value of zero
- perf/core: Bail out early if the request AUX area is out of bound
- !8132  scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- pinctrl: single: fix potential NULL dereference
- !8083 [sync] PR-6808:  CVE-2024-26923
- !8003 [sync] PR-7970:  fbmon: prevent division by zero in fb_videomode_from_videomode()
- scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- !6875 [sync] PR-6756:  vfio/fsl-mc: Block calling interrupt handler without trigger
- soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !7879 [sync] PR-7684:  dm snapshot: fix lockup in dm_exception_table_exit
- !8072 [sync] PR-8030:  netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- padata: Fix refcnt handling in padata_free_shell()
- padata: Convert from atomic_t to refcount_t on parallel_data-&gt;refcnt
- !7995  HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !8041  media: vidtv: mux: Add check and kfree for kstrdup
- media: usbtv: Remove useless locks in usbtv_video_free()
- ptp: fix code indentation issues
- ptp: Fix possible memory leak in ptp_clock_register()
- !7962  hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8020  media: bttv: fix use after free error due to btv-&gt;timeout timer
- af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc().
- af_unix: Fix garbage collector racing against connect()
- !8026 [sync] PR-7961:  net: atlantic: eliminate double free in error handling logic
- !7945  crypto: engine - fix crypto_queue backlog handling
- netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- !8034  clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- media: vidtv: mux: Add check and kfree for kstrdup
- clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- !8005 [sync] PR-7903:  virtio_ring : keep used_wrap_counter in
- net: atlantic: eliminate double free in error handling logic
- media: bttv: fix use after free error due to btv-&gt;timeout timer
- virtio_ring : keep used_wrap_counter in vq-&gt;last_used_idx
- fbmon: prevent division by zero in fb_videomode_from_videomode()
- HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !7954  media: vidtv: psi: Add check for kstrdup
- !7973 [sync] PR-7949:  drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- !7968 [sync] PR-7943: v2  netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7939 v2  pstore/platform: Add check for kstrdup
- drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7936 [sync] PR-7911:  ACPI: LPIT: Avoid u32 multiplication overflow
- !7850 [sync] PR-7576:  f2fs: compress: fix reserve_cblocks counting error when out of space
- !7862 [sync] PR-7757:  Fix CVE-2023-52656
- hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- media: vidtv: psi: Add check for kstrdup
- crypto: engine - fix crypto_queue backlog handling
- !7914 [sync] PR-7853:  net/mlx5e: fix a double-free in arfs_create_groups
- pstore/platform: Add check for kstrdup
- ACPI: LPIT: Avoid u32 multiplication overflow
- !7787 [sync] PR-7655: v3  KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7906 [sync] PR-7877: v4  eeprom: at24: fix memory corruption race condition
- net/mlx5e: fix a double-free in arfs_create_groups
- !7897  Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- eeprom: at24: fix memory corruption race condition
- !7796 [sync] PR-7743:  netrom: Fix data-races around sysctl_net_busy_read
- !7884 [sync] PR-7773:  Fix CVE-2023-52698
- Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- calipso: fix memory leak in netlbl_calipso_add_pass()
- netlabel: remove unused parameter in netlbl_netlink_auditinfo()
- net: netlabel: Fix kerneldoc warnings
- dm snapshot: fix lockup in dm_exception_table_exit
- !7859 [sync] PR-7846:  netrom: Fix a data-race around sysctl_netrom_transport_timeout
- io_uring: drop any code related to SCM_RIGHTS
- io_uring/unix: drop usage of io_uring socket
- netrom: Fix a data-race around sysctl_netrom_transport_timeout
- !7778 [sync] PR-7749: v2  wifi: iwlwifi: dbg-tlv: ensure NUL termination
- f2fs: compress: fix reserve_cblocks counting error when out of space
- !7829 [sync] PR-7779:  LoongArch: Define the __io_aw() hook as mmiowb()
- !7826 [sync] PR-7714:  CVE-2024-35936
- !7837 [sync] PR-7681:  xfs: three bug fix recently
- xfs: update dir3 leaf block metadata after swap
- xfs: ensure logflagsp is initialized in xfs_bmap_del_extent_real
- iomap: fix warning in xfs_iomap_write_delalloc_release()
- !7747  x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- !7819 [sync] PR-7734:  mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- LoongArch: Define the __io_aw() hook as mmiowb()
- btrfs: add missing mutex_unlock in btrfs_relocate_sys_chunks()
- btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks()
- mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- net-memcg: Fix scope of sockmem pressure indicators
- netrom: Fix data-races around sysctl_net_busy_read
- KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7768  net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: iwlwifi: dbg-tlv: ensure NUL termination
- !7711 [sync] PR-7579:  powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- !7755  wifi: ath11k: decrease MHI channel buffer length to 8KB
- net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: ath11k: decrease MHI channel buffer length to 8KB
- x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Squashfs: check the inode number is not the invalid value of zero
- vfio/fsl-mc: Block calling interrupt handler without trigger</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.78.0.158" date="1717588800">- !8594 [sync] PR-6990:  netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- !8591 [sync] PR-7174:  CVE-2022-48689
- !8595 [sync] PR-6939:  USB: core: Fix deadlock in usb_deauthorize_interface()
- !8554 [sync] PR-8395:  5.10: fix CVE-2024-35978
- !8364  perf: hisi: Fix use-after-free when register pmu fails
- !8606  smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- !7672  btrfs: send: handle path ref underflow in header iterate_inode_ref()
- !8597 [sync] PR-6393:  crypto: xilinx - call finalize with bh disabled
- !8514  net: ena: Fix incorrect descriptor free behavior
- !8563 [sync] PR-8110:  drm/client: Fully protect modes[
- smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- crypto: xilinx - call finalize with bh disabled
- USB: core: Fix deadlock in usb_deauthorize_interface()
- netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- tcp: TX zerocopy should not sense pfmemalloc status
- net: skbuff: update comment about pfmemalloc propagating
- net: introduce __skb_fill_page_desc_noacc
- tcp: factor out tcp_build_frag()
- !8505  CVE: CVE-2024-36015
- drm/client: Fully protect modes[] with dev-&gt;mode_config.mutex
- !8523  tty: vcc: Add check for kstrdup() in vcc_probe()
- !8487 [sync] PR-8397:  mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- !8486 [sync] PR-8373:  dma-direct: Leak pages on dma_set_decrypted() failure
- !8245 [sync] PR-7870:  CVE-2024-35995
- Bluetooth: Fix memory leak in hci_req_sync_complete()
- !8202  arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- !8408  pinctrl: core: delete incorrect free in pinctrl_enable()
- tty: vcc: Add check for kstrdup() in vcc_probe()
- net: ena: Fix incorrect descriptor free behavior
- !8457 [sync] PR-8416:  iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- !8501 [sync] PR-7889:  vt: fix unicode buffer corruption when deleting characters
- ppdev: Add an error check in register_device
- ppdev: Remove usage of the deprecated ida_simple_xx() API
- vt: fix unicode buffer corruption when deleting characters
- mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- dma-direct: Leak pages on dma_set_decrypted() failure
- !8429  drm/amdgpu: Fix even more out of bound writes from debugfs
- !8340  soc: qcom: llcc: Handle a second device without data corruption
- !8369  efi/capsule-loader: fix incorrect allocation size
- !8312 [sync] PR-8039: v2  dynamic_hugetlb: backport some bugfix
- !8451 [sync] PR-8342:  net/mlx5: Properly link new fs rules into the tree
- !8293  drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- net/mlx5: Properly link new fs rules into the tree
- !8179  jfs: fix array-index-out-of-bounds in diAlloc
- !8167 v2  mmc: sdio: fix possible resource leaks in some error paths
- !8346 [sync] PR-8248:  gfs2: ignore negated quota changes
- !8331 [sync] PR-8254:  sysv: don't call sb_bread() with pointers_lock held
- !8375 [sync] PR-8306:  mptcp: ensure tx skbs always have the MPTCP ext
- drm/amdgpu: Fix even more out of bound writes from debugfs
- !8391 [sync] PR-8109:  vhost-vdpa: fix use after free in vhost_vdpa_probe()
- pinctrl: core: delete incorrect free in pinctrl_enable()
- !8370  locking/ww_mutex/test: Fix potential workqueue corruption
- !8311  drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8334  wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- !8317  net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8235 [sync] PR-8054:  CVE-2023-52669
- !8380 [sync] PR-8212:  fix CVE-2024-35877
- vhost-vdpa: fix use after free in vhost_vdpa_probe()
- !8294  CVE-2023-52735
- x86/mm/pat: fix VM_PAT handling in COW mappings
- !8196  clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- mptcp: ensure tx skbs always have the MPTCP ext
- locking/ww_mutex/test: Fix potential workqueue corruption
- efi/capsule-loader: fix incorrect allocation size
- perf: hisi: Fix use-after-free when register pmu fails
- !7776 [sync] PR-7717:  CVE-2023-52655
- !8323 [sync] PR-8219:  tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8273  ALSA: hda: Do not unset preset when cleaning up codec
- !8269  drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- !8251 v2  CVE-2024-35956
- gfs2: ignore negated quota changes
- soc: qcom: llcc: Handle a second device without data corruption
- wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- sysv: don't call sb_bread() with pointers_lock held
- tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8277  usb: udc: remove warning when queue disabled ep
- net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8289 [sync] PR-8150:  mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !8265 [sync] PR-8228:  ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- mm/dynamic_hugetlb: refine error info in the destruction
- mm/dynamic_hugetlb: make free_huge_page_to_dhugetlb_pool irq safe
- mm/dynamic_hugetlb: check NULL pointer for early parameter
- mm/dynamic_hugetlb: add lru_add_drain_all() before migration
- mm/dynamic_hugetlb: add cond_resched() in hpool_merge_page()
- mm/dynamic_hugetlb: reduce the number of migration attempts
- mm/dpool: Use helper function to lock/unlock
- drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8231  CVE-2023-52804
- bpf, sockmap: Check for any of tcp_bpf_prots when cloning a listener
- bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself
- drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !7833 [sync] PR-7599:  irqchip/gic-v3-its: Prevent double free on error
- !8259 v5  can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- usb: udc: remove warning when queue disabled ep
- ALSA: hda: Do not unset preset when cleaning up codec
- drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- !7855  clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- btrfs: qgroup: fix qgroup prealloc rsv leak in subvolume operations
- btrfs: fix anon_dev leak in create_subvol()
- ACPI: CPPC: Fix access width used for PCC registers
- ACPI: CPPC: Fix bit_offset shift in MASK_VAL() macro
- ACPI: CPPC: Use access_width over bit_width for system memory accesses
- ACPI: CPPC: Fix up I/O port access in cpc_read()
- ACPI: CPPC: Implement support for SystemIO registers
- crypto: s390/aes - Fix buffer overread in CTR mode
- fs/jfs: Add validity check for db_maxag and db_agpref
- fs: jfs: fix shift-out-of-bounds in dbAllocAG
- !8224  ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- !8125 [sync] PR-8042:  xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- jfs: fix array-index-out-of-bounds in diAlloc
- mmc: sdio: fix possible resource leaks in some error paths
- xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- irqchip/gic-v3-its: Prevent double free on error
- usb: aqc111: check packet for fixup for true limit
- btrfs: send: handle path ref underflow in header iterate_inode_ref()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.79.0.159" date="1718193600">- !8950  aio: fix mremap after fork null-deref
- !8948  CVE-2022-48652
- !8866  ipv6: prevent NULL dereference in ip6_output()
- !8780  smb: client: fix UAF in smb2_reconnect_server()
- !8859  net/smc: avoid data corruption caused by decline
- !8722 v2  SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !8964  Fix CVE-2024-35915
- !8963  Fix CVE-2024-35915
- !8735  mptcp: ensure snd_nxt is properly initialized on connect
- !8761  tipc: fix UAF in error path
- !8741  octeontx2-af: avoid off-by-one read from userspace
- !8953  powerpc/powernv: Add a null pointer check in opal_event_init()
- !8685  mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- !8967  Fix CVE-2024-36949
- !8861  blk-iocost: do not WARN if iocg was already offlined
- !8841 v2  IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- !8945  usb: typec: ucsi: Limit read size on v1.2
- !8905  ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8709 [sync] PR-8046:  block: prevent division by zero in blk_rq_stat_sum()
- !8839  blk-iocost: avoid out of bounds shift
- !8857  PCI/PM: Drain runtime-idle callbacks before driver removal
- amd/amdkfd: sync all devices to wait all processes being evicted
- drm/amdkfd: Rework kfd_locked handling
- !8911  net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- !8915  gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- !8788 [sync] PR-8558:  xen-netfront: Add missing skb_mark_for_recycle
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- powerpc/powernv: Add a null pointer check in opal_event_init()
- aio: fix mremap after fork null-deref
- ice: Fix crash by keep old cfg when update TCs more than queues
- ice: ethtool: Prohibit improper channel config for DCB
- !8880  net: core: reject skb_copy(_expand) for fraglist GSO skbs
- usb: typec: ucsi: Limit read size on v1.2
- !8892  net: fix out-of-bounds access in ops_init
- !8810  net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8672  fix CVE-2024-36021 and CVE-2024-36900
- !8886  CVE-2024-36933
- gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8755  drm/amd/display: Avoid NULL dereference of timing generator
- !8754  pwm: Fix double shift bug
- !8850  ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- net: fix out-of-bounds access in ops_init
- !8665  phonet/pep: fix racy skb_queue_empty() use
- nsh: Restore skb-&gt;{protocol,data,mac_header} for outer header in nsh_gso_segment().
- net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment()
- net: core: reject skb_copy(_expand) for fraglist GSO skbs
- ipv6: prevent NULL dereference in ip6_output()
- blk-iocost: do not WARN if iocg was already offlined
- net/smc: avoid data corruption caused by decline
- PCI/PM: Drain runtime-idle callbacks before driver removal
- ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- !8687  tcp: properly terminate timers for kernel sockets
- !8630  erspan: make sure erspan_base_hdr is present in skb-&gt;head
- IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- blk-iocost: avoid out of bounds shift
- !7988 [sync] PR-7960:  ipv6: Fix infinite recursion in fib6_dump_done().
- !8388 [sync] PR-8300:  ipvlan: add ipvlan_route_v6_outbound() helper
- !8282 [sync] PR-8133:  fix CVE-2021-47265
- !7925 [sync] PR-7741:  ipv4: check for NULL idev in ip_route_use_hint()
- !8724  tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- !8480  scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- !8622  fs/9p: only translate RWX permissions for plain 9P2000
- net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8728  net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8790  Bluetooth: SCO: Fix not validating setsockopt user input
- !8680  rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- !8713 [sync] PR-8583:  mmc: sdhci-msm: pervent access to suspended controller
- !8670  CVE-2024-35854
- Bluetooth: SCO: Fix not validating setsockopt user input
- !8696  clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- !8653 v3  clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- xen-netfront: Add missing skb_mark_for_recycle
- !8571  jfs: fix two array-index-out-of-bounds issuse
- !8356  nilfs2: fix underflow in second superblock position calculations
- !8592  geneve: fix header validation in geneve[6
- !8531  gpiolib: cdev: fix uninitialised kfifo
- smb: client: fix UAF in smb2_reconnect_server()
- !8631 [sync] PR-8519:  mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- tipc: fix UAF in error path
- !8751  ubifs: Check @c-&gt;dirty_[n|p
- drm/amd/display: Avoid NULL dereference of timing generator
- pwm: Fix double shift bug
- !8633 [sync] PR-8425:  CVE-2023-52677
- ubifs: Check @c-&gt;dirty_[n|p]n_cnt and @c-&gt;nroot state under @c-&gt;lp_mutex
- octeontx2-af: avoid off-by-one read from userspace
- !8669  wifi: ath11k: fix dfs radar event locking
- !8619  CVE-2024-35896
- !8608  CVE-2024-35895
- mptcp: ensure snd_nxt is properly initialized on connect
- !8659  wifi: ath11k: fix htt pktlog locking
- !8587  fix CVE-2021-47558
- net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8569  fix CVE-2024-36906
- tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !7933  bpf: Protect against int overflow for stack access size
- !8627 [sync] PR-8561:  mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- !8625 [sync] PR-8497:  Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- mmc: sdhci-msm: pervent access to suspended controller
- !8572  xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- block: prevent division by zero in blk_rq_stat_sum()
- clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- tcp: properly terminate timers for kernel sockets
- mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- net: hns3: fix kernel crash when devlink reload during initialization
- net: hns3: release PTP resources if pf initialization failed
- net: hns3: fix kernel crash when devlink reload during vf initialization
- net: hns3: fix kernel crash when devlink reload during pf initialization
- mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash
- wifi: ath11k: fix dfs radar event locking
- phonet/pep: fix racy skb_queue_empty() use
- wifi: ath11k: fix htt pktlog locking
- clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- !8537  scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- !8538  drm/amdgpu: Fix potential null pointer derefernce
- !8540  s390/dasd: protect device queue against concurrent access
- !8462  i2c: smbus: fix NULL function pointer dereference
- !8432  platform/x86: wmi: Fix opening of char device
- riscv: Check if the code to patch lies in the exit section
- mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- erspan: make sure erspan_base_hdr is present in skb-&gt;head
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- fs/9p: only translate RWX permissions for plain 9P2000
- netfilter: complete validation of user input
- netfilter: validate user input for expected length
- Revert "bpf, sockmap: Prevent lock inversion deadlock in map delete elem"
- bpf: Allow delete from sockmap/sockhash only if update is allowed
- bpf, sockmap: Prevent lock inversion deadlock in map delete elem
- geneve: fix header validation in geneve[6]_xmit_skb
- net: stmmac: Disable Tx queues when reconfiguring the interface
- xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- jfs: fix array-index-out-of-bounds in dbFindLeaf
- fs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev
- ARM: 9381/1: kasan: clear stale stack poison
- s390/dasd: protect device queue against concurrent access
- drm/amdgpu: Fix potential null pointer derefernce
- scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- gpiolib: cdev: fix uninitialised kfifo
- scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- i2c: smbus: fix NULL function pointer dereference
- platform/x86: wmi: Fix opening of char device
- ipvlan: add ipvlan_route_v6_outbound() helper
- nilfs2: fix underflow in second superblock position calculations
- RDMA: Verify port when creating flow rule
- IB/mlx4: Use port iterator and validation APIs
- ipv6: Fix infinite recursion in fib6_dump_done().
- bpf: Protect against int overflow for stack access size
- ipv4: check for NULL idev in ip_route_use_hint()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.80.0.160" date="1718798400">- !9093 v2  ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9031  bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- !9065  afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- !8933  Fix CVE-2023-52732
- !8927 [sync] PR-8222:  Fix CVE-2023-52672
- !9172 [sync] PR-7041:  netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
- !9171 [sync] PR-6994: v2  net/mlx5e: Prevent deadlock while disabling aRFS
- !8733  batman-adv: Avoid infinite loop trying to resize local TT
- !7374 [sync] PR-6879:  net/smc: Fix possible access to freed memory in link clear
- !9098  Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
- net/mlx5e: Prevent deadlock while disabling aRFS
- !9165  genirq: introduce handle_fasteoi_edge_irq flow handler
- genirq: introduce handle_fasteoi_edge_irq for phytium
- genirq: introduce handle_fasteoi_edge_irq flow handler
- !9139 v2  CVE-2024-36971
- !8495  rpmsg: virtio: Free driver_override when rpmsg_remove()
- !9127  hsr: Prevent use after free in prp_create_tagged_frame()
- !9075  Fix UAF problem of hpool
- !9132  mm: swap: fix race between free_swap_and_cache() and swapoff()
- !9130  ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- !9069  Bluetooth: RFCOMM: Fix not validating setsockopt user input
- !8970  mmc: mmc_spi: fix error handling in mmc_spi_probe()
- !8977 [sync] PR-8584:  virtio-blk: fix implicit overflow on virtio_max_dma_size
- !8701  wifi: cfg80211: check A-MSDU format more carefully
- net: fix kabi breakage in struct dst_ops
- net: fix __dst_negative_advice() race
- net: annotate data-races around sk-&gt;sk_dst_pending_confirm
- mm: swap: fix race between free_swap_and_cache() and swapoff()
- ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- hsr: Prevent use after free in prp_create_tagged_frame()
- !9002  scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- !9056  drm/panel: fix a possible null pointer dereference
- !9054  soc: fsl: qbman: Use raw spinlock for cgr_lock
- !8939  clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- !8952  ACPI: video: check for error while searching for backlight device parent
- !8986 [sync] PR-8639:  s390/qeth: Fix kernel panic after setting hsuid
- Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- !8714  Fix page corruption caused by racy check in __free_pages
- ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9080  Bluetooth: L2CAP: Fix not validating setsockopt user input
- Bluetooth: L2CAP: Fix not validating setsockopt user input
- mm/dynamic_hugetlb: use rcu lock to protect hpool
- mm/dynamic_hugetlb: simplify the refcount code
- !9072 [sync] PR-9015:  CVE-2024-36953
- !9071 [sync] PR-9014:  drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr()
- KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id
- drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- Bluetooth: RFCOMM: Fix not validating setsockopt user input
- afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- !8947 [sync] PR-6800:  block: fix overflow in blk_ioctl_discard()
- !9052  CVE-2024-35796
- drm/panel: fix a possible null pointer dereference
- soc: fsl: qbman: Use raw spinlock for cgr_lock
- !9021  wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- net: ll_temac: platform_get_resource replaced by wrong function
- !9048  IB/hfi1: Restore allocated resources on failed copyout
- IB/hfi1: Restore allocated resources on failed copyout
- !9028  tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- !8830  Fix CVE-2024-35951
- !9009  fix CVE-2024-35839
- !9008  tipc: fix a possible memleak in tipc_buf_append
- !8721  CVE-2024-35887
- !8876  drm/vmwgfx: Fix invalid reads in fence signaled events
- !8884  scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- !8922  hugetlbfs: fix hugetlbfs_statfs() locking
- bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- netfilter: bridge: replace physindev with physinif in nf_bridge_info
- netfilter: propagate net to nf_bridge_get_physindev
- netfilter: nfnetlink_log: use proper helper for fetching physinif
- !8662  usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group
- tipc: fix a possible memleak in tipc_buf_append
- !8617 [sync] PR-8472:  fix CVE-2024-27415
- !8983  fix CVE-2024-36905
- scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- s390/qeth: Fix kernel panic after setting hsuid
- net: relax socket state check at accept time.
- tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets
- virtio-blk: fix implicit overflow on virtio_max_dma_size
- mmc: mmc_spi: fix error handling in mmc_spi_probe()
- ACPI: video: check for error while searching for backlight device parent
- block: fix overflow in blk_ioctl_discard()
- clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- ceph: blocklist the kclient when receiving corrupted snap trace
- ceph: shut down access to inode when async create fails
- ceph: refactor remove_session_caps_cb
- ceph: fix auth cap handling logic in remove_session_caps_cb
- ceph: drop private list from remove_session_caps_cb
- pipe: wakeup wr_wait after setting max_usage
- fs/pipe: move check to pipe_has_watch_queue()
- hugetlbfs: fix hugetlbfs_statfs() locking
- scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- drm/vmwgfx: Fix invalid reads in fence signaled events
- drm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr()
- drm/panfrost: Fix the panfrost_mmu_map_fault_addr() error path
- batman-adv: Avoid infinite loop trying to resize local TT
- ax25: fix use-after-free bugs caused by ax25_ds_del_timer
- Fix page corruption caused by racy check in __free_pages
- wifi: cfg80211: check A-MSDU format more carefully
- usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group
- netfilter: br_netfilter: skip conntrack input hook for promisc packets
- netfilter: bridge: confirm multicast packets before passing them up the stack
- rpmsg: virtio: Free driver_override when rpmsg_remove()
- net/smc: Fix possible access to freed memory in link clear</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.80.0.161" date="1718884800">- Add the pub key in openEuler RPM-PGP certificate</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.81.0.162" date="1719403200">- !8104 [sync] PR-7886:  drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- !9443  net/mlx5: Discard command completions in internal error
- !9448  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9432  hid: cp2112: Fix duplicate workqueue initialization
- !9424  ASoC: SOF: Fix DSP oops stack dump output contents
- !9418 [sync] PR-6683: v2  CVE-2024-26921
- !9296  CVE-2021-47599
- !9403  Fix CVE-2024-31076
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- !9198  init/main.c: Fix potential static_command_line memory overflow
- hid: cp2112: Fix duplicate workqueue initialization
- ASoC: SOF: Fix DSP oops stack dump output contents
- !6742 [sync] PR-6654:  net/ipv6: avoid possible UAF in ip6_route_mpath_notify()
- sk_buff: Fix KABI break for the modification of struct sk_buff
- inet: inet_defrag: prevent sk release while still in use
- net: Fix KABI break for introducing is_skb_wmem()
- skb_expand_head() adjust skb-&gt;truesize incorrectly
- skbuff: introduce skb_expand_head()
- !9349  powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9396  RDMA/hns: Fix deadlock on SRQ async events.
- !9353 [sync] PR-9305:  CVE-2024-26661 following bugfix
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- !9359  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9379  RDMA/hns: Fix UAF for cq async event
- !9291  net: bridge: xmit: make sure we have at least eth header len bytes
- RDMA/hns: Fix deadlock on SRQ async events.
- !9049 [sync] PR-8774:  CVE-2024-36914
- !9263  ring-buffer: Fix a race between readers and resize checks
- RDMA/hns: Fix UAF for cq async event
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- Revert "drm/amd/display: Fix &amp;&amp; vs || typos"
- powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9272  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9274  wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- !9281  drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- !9279  net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- !9213 [sync] PR-9112:  Backport some optimizing patches for kunpeng920
- !9106  ksmbd: no response from compound read
- !9185  spi: Fix deadlock when adding SPI controllers on SPI buses
- net: bridge: xmit: make sure we have at least eth header len bytes
- drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- ring-buffer: Fix a race between readers and resize checks
- !9181  wifi: wilc1000: fix RCU usage in connect path
- !9214  drm/amd/display: Fix division by zero in setup_dsc_config
- !7541 [sync] PR-6801:  block: fix discard
- !9142 v2  CVE-2023-52810
- !8460 [sync] PR-8069:  CVE-2021-47427
- !9155  fix CVE-2023-52791
- !9169  UBIFS: fixes a series of issues that caused by power cut
- !9003  media: tc358743: register v4l2 async device only after successful setup
- !9088  fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Fix division by zero in setup_dsc_config
- arm64: syscall: unmask DAIF for tracing status
- arm64: Snapshot thread flags
- sched: Snapshot thread flags
- entry: Snapshot thread flags
- x86: Snapshot thread flags
- thread_info: Add helpers to snapshot thread flags
- irqchip/gic-v3: Use dsb(ishst) to order writes with ICC_SGI1R_EL1 accesses
- sched/fair: Optimize test_idle_cores() for !SMT
- init/main.c: Fix potential static_command_line memory overflow
- spi: fix kabi breakage in struct spi_controller
- spi: fix use-after-free of the add_lock mutex
- spi: Fix deadlock when adding SPI controllers on SPI buses
- wifi: wilc1000: fix RCU usage in connect path
- ubifs: dbg_orphan_check: Fix missed key type checking
- ubifs: Fix unattached inode when powercut happens in creating
- ubifs: Fix space leak when powercut happens in linking tmpfile
- ubifs: Move ui-&gt;data initialization after initializing security
- ubifs: Fix adding orphan entry twice for the same inode
- ubifs: Remove insert_dead_orphan from replaying orphan process
- ubifs: Don't add xattr inode into orphan area
- ubifs: Fix unattached xattr inode if powercut happens after deleting
- ubifs: Fix some kernel-doc comments
- ubifs: Fix spelling mistakes
- i2c: core: Fix atomic xfer check for non-preempt config
- i2c: core: Run atomic i2c xfer when !preemptible
- fs/jfs: Add check for negative db_l2nbperpage
- jfs: jfs_dmap: Validate db_l2nbperpage while mounting
- ksmbd: no response from compound read
- fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Skip on writeback when it's not applicable
- media: tc358743: register v4l2 async device only after successful setup
- scsi: iscsi: Fix iscsi_task use after free
- scsi: iscsi: Have abort handler get ref to conn
- drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- block: check io size before submit discard
- block: fix overflow in blk_ioctl_discard()
- net/ipv6: avoid possible UAF in ip6_route_mpath_notify()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.82.0.163" date="1719403201">- !9461 [sync] PR-5860:  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9197  scsi: core: Fix unremoved procfs host directory regression
- !9203  dyndbg: fix old BUG_ON in &gt;control parser
- !9195  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9200  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9189  clk: Fix clk_core_get NULL dereference
- !9187  net: phy: fix phy_get_internal_delay accessing an empty array
- !9460 v2  CVE-2024-27032
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- scsi: core: Fix unremoved procfs host directory regression
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array</changelog>
</package>
<package pkgid="1893f1f4da3c002525df17e6aaf438e1e7867bed06a49319b32911acc8fd5bae" name="kernel" arch="src">
  <version epoch="0" ver="5.10.0" rel="136.83.0.164.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.75.0.155" date="1715774400">- !6039 [sync] PR-6006:  fix CVE-2024-26669
- !5882 [sync] PR-5751:  net: atlantic: Fix DMA mapping for PTP hwts ring
- !7340  netfilter: nft_limit: reject configurations that cause integer overflow
- !7253  netfilter: nf_tables: disallow timeout for anonymous sets
- netfilter: nft_limit: reject configurations that cause integer overflow
- netfilter: nf_tables: disallow timeout for anonymous sets
- !7161 [sync] PR-6809:  memcg: fix possible use-after-free in memcg_write_event_control()
- !7121 [sync] PR-7086:  media: ttpci: fix two memleaks in budget_av_attach
- !7123 [sync] PR-7080:  drm: nv04: Fix out of bounds access
- !7145 [sync] PR-7044: v2  nfs: fix UAF in direct writes
- !7155 [sync] PR-7148:  scsi: sd: Fix sd_do_mode_sense() buffer length handling
- !7179  ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- !6978  ksmbd: validate payload size in ipc response
- !7098 [sync] PR-6818:  mm: memcg: fix stale protection of reclaim target memcg
- memcg: fix possible use-after-free in memcg_write_event_control()
- scsi: sd: Fix sd_do_mode_sense() buffer length handling
- nfs: fix UAF in direct writes
- !6764 [sync] PR-6680:  cifs: fix underflow in parse_server_interfaces()
- !6766 [sync] PR-6669:  NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- drm: nv04: Fix out of bounds access
- media: ttpci: fix two memleaks in budget_av_attach
- !7102 [sync] PR-7039:  USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7084 [sync] PR-7013:  media: edia: dvbdev: fix a use-after-free
- !7024 [sync] PR-6988:  clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- !6213 [sync] PR-6178:  CVE-2024-26812
- USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7009 [sync] PR-6959:  mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !7064 [sync] PR-7056:  scsi: qla2xxx: Fix command flush on cable pull
- mm: memcg: fix stale protection of reclaim target memcg
- !6946 [sync] PR-6840:  CVE-2023-52650
- media: edia: dvbdev: fix a use-after-free
- scsi: qla2xxx: Fix command flush on cable pull
- !6093 [sync] PR-5921:  ext4: fix double-free of blocks due to wrong extents moved_len
- !6090 [sync] PR-5977:  btrfs: dev-replace: properly validate device names
- !6096 [sync] PR-6029:  ceph: prevent use-after-free in encode_cap_msg()
- !7029 [sync] PR-6977:  wireguard: netlink: access device through ctx instead of peer
- drm/tegra: dsi: Add missing check for of_find_device_by_node
- wireguard: netlink: access device through ctx instead of peer
- !6986 [sync] PR-6964: v2  CVE-2024-27000
- clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !6691  quota: Fix potential NULL pointer dereference
- serial: core: fix kernel-doc for uart_port_unlock_irqrestore()
- serial: mxs-auart: add spinlock around changing cts state
- serial: core: Provide port lock wrappers
- !6885 [sync] PR-6740:  V2 cpuset: fix race between rebuild scheduler domains and hotplug work
- !6961 [sync] PR-6861:  media: dvb-frontends: avoid stack overflow warnings with clang
- ksmbd: validate payload size in ipc response
- !6912  pstore: inode: Only d_invalidate() is needed
- !6937 [sync] PR-6826:  fat: fix uninitialized field in nostale filehandles
- !6934 [sync] PR-6838:  fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- media: dvb-frontends: avoid stack overflow warnings with clang
- fat: fix uninitialized field in nostale filehandles
- fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- pstore: inode: Only d_invalidate() is needed
- cpuset: fix race between rebuild scheduler domains and hotplug work
- NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- cifs: fix underflow in parse_server_interfaces()
- quota: Fix potential NULL pointer dereference
- vfio/pci: Create persistent INTx handler
- vfio: Introduce interface to flush virqfd inject workqueue
- ceph: prevent use-after-free in encode_cap_msg()
- ext4: fix double-free of blocks due to wrong extents moved_len
- btrfs: dev-replace: properly validate device names
- net/sched: flower: Fix kabi change
- net/sched: flower: Fix chain template offload
- net: atlantic: Fix DMA mapping for PTP hwts ring</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.76.0.156" date="1716379200">- !7634  spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- !7642  hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- !7724  CVE-2024-27002
- !7706  pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- !7618 [sync] PR-5930:  RDMA/srpt: Support specifying the srpt_service_guid parameter
- !6243 [sync] PR-6082:  can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- !6153 [sync] PR-6020:  net/sched: act_mirred: use the backlog for mirred ingress
- !7621 [sync] PR-6259:  arp: Prevent overflow in arp_req_get().
- !7616 [sync] PR-5993:  ipv6: sr: fix possible use-after-free and null-ptr-deref
- !7613 [sync] PR-5996:  mptcp: fix double-free on socket dismantle
- !6223 [sync] PR-6074:  Fix CVE-2024-26787
- !7610 [sync] PR-6279:  Bluetooth: Avoid potential use-after-free in hci_error_reset
- !7380 [sync] PR-6085:  netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- !7377 [sync] PR-6086:  netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- !5984 [sync] PR-5852:  CVE-2024-26809
- !7708  bpf: Guard stack limits against 32bit overflow
- !7637  dm-crypt: don't modify the data when using authenticated encryption
- !7623 [sync] PR-6033:  gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- !7696  ext4: fix corruption during on-line resize
- !7703  pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- !7628 [sync] PR-5950:  RDMA/qedr: Fix qedr_create_user_qp error flow
- clk: mediatek: Do a runtime PM get on controllers during probe
- !6532 [sync] PR-6486:  devlink: fix possible use-after-free and memory leaks in devlink_init()
- !7554 [sync] PR-5530:  net: Fix CVE-2024-26641
- !7551 [sync] PR-7006:  wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7667 [sync] PR-7586:  powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- bpf: Guard stack limits against 32bit overflow
- pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- ext4: fix corruption during on-line resize
- !7604  cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7512 [sync] PR-7408:  backport important fix for broadcom net card
- !7510 [sync] PR-7407:  nvme-fc: do not wait in vain when unloading module
- !7513 [sync] PR-7406:  drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- !7508 [sync] PR-7402:  scsi: lpfc: Fix possible file string name overflow when updating firmware
- !7507 [sync] PR-7404:  scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- !7503 [sync] PR-7403:  scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- !7523 [sync] PR-7401:  nvme-core: check for too small lba shift
- !7499 [sync] PR-7396:  drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- !7493 [sync] PR-7398:  drm/amd/display: Fix memory leak in dm_sw_fini()
- !7490 [sync] PR-7399:  drm/amd/pm: fix a double-free in si_dpm_init
- !7496 [sync] PR-7397:  drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7590  drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7597 [sync] PR-7548:  btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7564  net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- dm-crypt: don't modify the data when using authenticated encryption
- spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- dm-crypt: don't modify the data when using authenticated encryption
- RDMA/qedr: Fix qedr_create_user_qp error flow
- gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- arp: Prevent overflow in arp_req_get().
- RDMA/srpt: Support specifying the srpt_service_guid parameter
- ipv6: sr: fix possible use-after-free and null-ptr-deref
- mptcp: fix double-free on socket dismantle
- Bluetooth: Avoid potential use-after-free in hci_error_reset
- cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7557 [sync] PR-7520:  drm/i915/gt: Reset queue_priority_hint on parking
- drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7363 [sync] PR-5491:  CVE-2024-26640
- !6553  fixup CVE-2024-26908
- !7535 v2  CVE-2024-26907
- net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- drm/i915/gt: Reset queue_priority_hint on parking
- ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()
- ip6_tunnel: use dev_sw_netstats_rx_add()
- wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7518 [sync] PR-7484:  fix CVE-2024-26661
- kernel-doc: fix struct_group_tagged() parsing
- uapi: propagate __struct_group() attributes to the container union
- RDMA/mlx5: Fix fortify source warning while accessing Eth segment
- uapi: stddef.h: Fix __DECLARE_FLEX_ARRAY for C++
- stddef: Introduce DECLARE_FLEX_ARRAY() helper
- uapi/linux/stddef.h: Add include guards
- stddef: Introduce struct_group() helper macro
- !7516 [sync] PR-7483:  Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- !7355  blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- !7347  PM / devfreq: Synchronize devfreq_monitor_[start/stop
- !7357  sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- !7443 [sync] PR-6037:  fix-CVE-2024-26706
- nvme-core: check for too small lba shift
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Add NULL test for 'timing generator' in 'dcn21_set_pipe()'
- !7486 [sync] PR-7476:  firewire: nosy: ensure user_length is taken into account when fetching packet contents
- Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- net/tg3: fix race condition in tg3_reset_task()
- net/tg3: resolve deadlock in tg3_reset_task() during EEH
- net: bnxt: fix a potential use-after-free in bnxt_init_tc
- net/bnx2x: Prevent access to a freed page in page_pool
- nvme-fc: do not wait in vain when unloading module
- scsi: lpfc: Fix possible file string name overflow when updating firmware
- scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- drm/amd/display: Fix memory leak in dm_sw_fini()
- drm/amd/pm: fix a double-free in si_dpm_init
- !7295  KVM: s390: vsie: fix race during shadow creation
- firewire: nosy: ensure user_length is taken into account when fetching packet contents
- !7257  netfilter: nf_tables: disallow anonymous set with timeout flag
- !7336  inet: read sk-&gt;sk_family once in inet_recv_error()
- !7329  tunnels: fix out of bounds access when building IPv6 PMTU error
- !7324  net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- !7311  btrfs: don't drop extent_map for free space inode on write error
- !7449 [sync] PR-5998:  net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- !7446 [sync] PR-6031:  nilfs2: fix potential bug in end_buffer_async_write
- !7276  llc: Drop support for ETH_P_TR_802_2.
- !7281  llc: make llc_ui_sendmsg() more robust against bonding changes
- !7457  netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7263  Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- !7479 [sync] PR-7424:  net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- !7343  ppp_async: limit MRU to 64K
- !5867 [sync] PR-5794:  um: time-travel: fix time corruption
- !7390 [sync] PR-5469:  wifi: iwlwifi: fix a memory corruption
- !7313  CVE-2024-26686
- !7301  nilfs2: fix data corruption in dsync block recovery for small block sizes
- !7298  powerpc/kasan: Fix addr error caused by page alignment
- !7274  binder: fix race between mmput() and do_exit()
- !7261  ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- !5623 [sync] PR-5566:  tracing: Ensure visibility when inserting an element into tracing_map
- !7241  SUNRPC: Fix a suspicious RCU usage warning
- !7231 [sync] PR-5460: v2  crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- !7240  bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- !7319  mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- !7467 [sync] PR-7394: v2  scsi: sr: Do not leak information in ioctl
- scsi: sr: Do not leak information in ioctl
- !7020 [sync] PR-6855:  KVM: Always flush async #PF workqueue when vCPU is being destroyed
- !7307  iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7427  net: gtp: Fix Use-After-Free in gtp_dellink
- !7431 [sync] PR-3972:  arm64: make cma=0 as default for openeuler
- net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- nilfs2: fix potential bug in end_buffer_async_write
- parisc/unaligned: Fix emulate_ldw() breakage
- parisc/unaligned: Rewrite 64-bit inline assembly of emulate_ldd()
- parisc: Fix random data corruption from exception handler
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_sth()
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_ldd()
- parisc/unaligned: Rewrite inline assembly of emulate_ldw()
- parisc: Mark ex_table entries 32-bit aligned in uaccess.h
- parisc: Fix some apparent put_user() failures
- parisc: Implement __get/put_kernel_nofault()
- parisc: Drop strnlen_user() in favour of generic version
- parisc: Switch user access functions to signal errors in r29 instead of r8
- parisc/unaligned: Rewrite inline assembly of emulate_ldh()
- parisc/unaligned: Use EFAULT fixup handler in unaligned handlers
- !7436 [sync] PR-7414:  clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- arm64: make cma=0 as default for openeuler
- net: gtp: Fix Use-After-Free in gtp_dellink
- !7383 [sync] PR-6428:  net/sched: flower: Fix unable to handle page fault bug in fl_init
- !7267  block/rnbd-srv: Check for unlikely string overflow
- wifi: iwlwifi: fix a memory corruption
- net/sched: flower: Fix unable to handle page fault bug in fl_init
- netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- tcp: add sanity checks to rx zerocopy
- net-zerocopy: Refactor frag-is-remappable test.
- sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- PM / devfreq: Synchronize devfreq_monitor_[start/stop]
- ppp_async: limit MRU to 64K
- inet: read sk-&gt;sk_family once in inet_recv_error()
- tunnels: fix out of bounds access when building IPv6 PMTU error
- net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- fs/proc: do_task_stat: use sig-&gt;stats_lock to gather the threads/children stats
- fs/proc: do_task_stat: use __for_each_thread()
- fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- exit: Use the correct exit_code in /proc/&lt;pid&gt;/stat
- btrfs: don't drop extent_map for free space inode on write error
- iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- nilfs2: fix data corruption in dsync block recovery for small block sizes
- powerpc/kasan: Fix addr error caused by page alignment
- KVM: s390: vsie: fix race during shadow creation
- llc: make llc_ui_sendmsg() more robust against bonding changes
- llc: Drop support for ETH_P_TR_802_2.
- binder: fix race between mmput() and do_exit()
- block/rnbd-srv: Check for unlikely string overflow
- Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- netfilter: nf_tables: disallow anonymous set with timeout flag
- SUNRPC: Fix a suspicious RCU usage warning
- bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- KVM: Always flush async #PF workqueue when vCPU is being destroyed
- x86/xen: Add some null pointer checking to smp.c
- devlink: fix possible use-after-free and memory leaks in devlink_init()
- mmc: mmci: stm32: fix DMA API overlapping mappings warning
- mmc: mmci: stm32: use a buffer for unaligned DMA requests
- net/sched: act_mirred: use the backlog for mirred ingress
- netfilter: nft_set_pipapo: release elements in clone only from destroy path
- netfilter: nft_set_pipapo: remove scratch_aligned pointer
- netfilter: nft_set_pipapo: add helper to release pcpu scratch area
- netfilter: nft_set_pipapo: store index in scratch maps
- um: time-travel: fix time corruption
- tracing: Ensure visibility when inserting an element into tracing_map</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.77.0.157" date="1716984000">- !8099  Fix CVE-2023-52854
- !8045  drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- !8148  pinctrl: single: fix potential NULL dereference
- !8157 [sync] PR-8017:  perf/core: Bail out early if the request AUX area is out of bound
- !8114 [sync] PR-8023:  fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !8093 [sync] PR-7980:  Fix CVE-2021-47455
- !8117 [sync] PR-8060:  soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- !7799  net-memcg: Fix scope of sockmem pressure indicators
- !8087 [sync] PR-8019:  pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8095 [sync] PR-7143:  media: usbtv: Remove useless locks in usbtv_video_free()
- !7134 [sync] PR-7092:  Squashfs: check the inode number is not the invalid value of zero
- perf/core: Bail out early if the request AUX area is out of bound
- !8132  scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- pinctrl: single: fix potential NULL dereference
- !8083 [sync] PR-6808:  CVE-2024-26923
- !8003 [sync] PR-7970:  fbmon: prevent division by zero in fb_videomode_from_videomode()
- scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- !6875 [sync] PR-6756:  vfio/fsl-mc: Block calling interrupt handler without trigger
- soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !7879 [sync] PR-7684:  dm snapshot: fix lockup in dm_exception_table_exit
- !8072 [sync] PR-8030:  netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- padata: Fix refcnt handling in padata_free_shell()
- padata: Convert from atomic_t to refcount_t on parallel_data-&gt;refcnt
- !7995  HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !8041  media: vidtv: mux: Add check and kfree for kstrdup
- media: usbtv: Remove useless locks in usbtv_video_free()
- ptp: fix code indentation issues
- ptp: Fix possible memory leak in ptp_clock_register()
- !7962  hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8020  media: bttv: fix use after free error due to btv-&gt;timeout timer
- af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc().
- af_unix: Fix garbage collector racing against connect()
- !8026 [sync] PR-7961:  net: atlantic: eliminate double free in error handling logic
- !7945  crypto: engine - fix crypto_queue backlog handling
- netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- !8034  clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- media: vidtv: mux: Add check and kfree for kstrdup
- clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- !8005 [sync] PR-7903:  virtio_ring : keep used_wrap_counter in
- net: atlantic: eliminate double free in error handling logic
- media: bttv: fix use after free error due to btv-&gt;timeout timer
- virtio_ring : keep used_wrap_counter in vq-&gt;last_used_idx
- fbmon: prevent division by zero in fb_videomode_from_videomode()
- HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !7954  media: vidtv: psi: Add check for kstrdup
- !7973 [sync] PR-7949:  drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- !7968 [sync] PR-7943: v2  netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7939 v2  pstore/platform: Add check for kstrdup
- drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7936 [sync] PR-7911:  ACPI: LPIT: Avoid u32 multiplication overflow
- !7850 [sync] PR-7576:  f2fs: compress: fix reserve_cblocks counting error when out of space
- !7862 [sync] PR-7757:  Fix CVE-2023-52656
- hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- media: vidtv: psi: Add check for kstrdup
- crypto: engine - fix crypto_queue backlog handling
- !7914 [sync] PR-7853:  net/mlx5e: fix a double-free in arfs_create_groups
- pstore/platform: Add check for kstrdup
- ACPI: LPIT: Avoid u32 multiplication overflow
- !7787 [sync] PR-7655: v3  KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7906 [sync] PR-7877: v4  eeprom: at24: fix memory corruption race condition
- net/mlx5e: fix a double-free in arfs_create_groups
- !7897  Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- eeprom: at24: fix memory corruption race condition
- !7796 [sync] PR-7743:  netrom: Fix data-races around sysctl_net_busy_read
- !7884 [sync] PR-7773:  Fix CVE-2023-52698
- Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- calipso: fix memory leak in netlbl_calipso_add_pass()
- netlabel: remove unused parameter in netlbl_netlink_auditinfo()
- net: netlabel: Fix kerneldoc warnings
- dm snapshot: fix lockup in dm_exception_table_exit
- !7859 [sync] PR-7846:  netrom: Fix a data-race around sysctl_netrom_transport_timeout
- io_uring: drop any code related to SCM_RIGHTS
- io_uring/unix: drop usage of io_uring socket
- netrom: Fix a data-race around sysctl_netrom_transport_timeout
- !7778 [sync] PR-7749: v2  wifi: iwlwifi: dbg-tlv: ensure NUL termination
- f2fs: compress: fix reserve_cblocks counting error when out of space
- !7829 [sync] PR-7779:  LoongArch: Define the __io_aw() hook as mmiowb()
- !7826 [sync] PR-7714:  CVE-2024-35936
- !7837 [sync] PR-7681:  xfs: three bug fix recently
- xfs: update dir3 leaf block metadata after swap
- xfs: ensure logflagsp is initialized in xfs_bmap_del_extent_real
- iomap: fix warning in xfs_iomap_write_delalloc_release()
- !7747  x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- !7819 [sync] PR-7734:  mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- LoongArch: Define the __io_aw() hook as mmiowb()
- btrfs: add missing mutex_unlock in btrfs_relocate_sys_chunks()
- btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks()
- mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- net-memcg: Fix scope of sockmem pressure indicators
- netrom: Fix data-races around sysctl_net_busy_read
- KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7768  net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: iwlwifi: dbg-tlv: ensure NUL termination
- !7711 [sync] PR-7579:  powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- !7755  wifi: ath11k: decrease MHI channel buffer length to 8KB
- net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: ath11k: decrease MHI channel buffer length to 8KB
- x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Squashfs: check the inode number is not the invalid value of zero
- vfio/fsl-mc: Block calling interrupt handler without trigger</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.78.0.158" date="1717588800">- !8594 [sync] PR-6990:  netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- !8591 [sync] PR-7174:  CVE-2022-48689
- !8595 [sync] PR-6939:  USB: core: Fix deadlock in usb_deauthorize_interface()
- !8554 [sync] PR-8395:  5.10: fix CVE-2024-35978
- !8364  perf: hisi: Fix use-after-free when register pmu fails
- !8606  smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- !7672  btrfs: send: handle path ref underflow in header iterate_inode_ref()
- !8597 [sync] PR-6393:  crypto: xilinx - call finalize with bh disabled
- !8514  net: ena: Fix incorrect descriptor free behavior
- !8563 [sync] PR-8110:  drm/client: Fully protect modes[
- smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- crypto: xilinx - call finalize with bh disabled
- USB: core: Fix deadlock in usb_deauthorize_interface()
- netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- tcp: TX zerocopy should not sense pfmemalloc status
- net: skbuff: update comment about pfmemalloc propagating
- net: introduce __skb_fill_page_desc_noacc
- tcp: factor out tcp_build_frag()
- !8505  CVE: CVE-2024-36015
- drm/client: Fully protect modes[] with dev-&gt;mode_config.mutex
- !8523  tty: vcc: Add check for kstrdup() in vcc_probe()
- !8487 [sync] PR-8397:  mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- !8486 [sync] PR-8373:  dma-direct: Leak pages on dma_set_decrypted() failure
- !8245 [sync] PR-7870:  CVE-2024-35995
- Bluetooth: Fix memory leak in hci_req_sync_complete()
- !8202  arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- !8408  pinctrl: core: delete incorrect free in pinctrl_enable()
- tty: vcc: Add check for kstrdup() in vcc_probe()
- net: ena: Fix incorrect descriptor free behavior
- !8457 [sync] PR-8416:  iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- !8501 [sync] PR-7889:  vt: fix unicode buffer corruption when deleting characters
- ppdev: Add an error check in register_device
- ppdev: Remove usage of the deprecated ida_simple_xx() API
- vt: fix unicode buffer corruption when deleting characters
- mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- dma-direct: Leak pages on dma_set_decrypted() failure
- !8429  drm/amdgpu: Fix even more out of bound writes from debugfs
- !8340  soc: qcom: llcc: Handle a second device without data corruption
- !8369  efi/capsule-loader: fix incorrect allocation size
- !8312 [sync] PR-8039: v2  dynamic_hugetlb: backport some bugfix
- !8451 [sync] PR-8342:  net/mlx5: Properly link new fs rules into the tree
- !8293  drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- net/mlx5: Properly link new fs rules into the tree
- !8179  jfs: fix array-index-out-of-bounds in diAlloc
- !8167 v2  mmc: sdio: fix possible resource leaks in some error paths
- !8346 [sync] PR-8248:  gfs2: ignore negated quota changes
- !8331 [sync] PR-8254:  sysv: don't call sb_bread() with pointers_lock held
- !8375 [sync] PR-8306:  mptcp: ensure tx skbs always have the MPTCP ext
- drm/amdgpu: Fix even more out of bound writes from debugfs
- !8391 [sync] PR-8109:  vhost-vdpa: fix use after free in vhost_vdpa_probe()
- pinctrl: core: delete incorrect free in pinctrl_enable()
- !8370  locking/ww_mutex/test: Fix potential workqueue corruption
- !8311  drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8334  wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- !8317  net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8235 [sync] PR-8054:  CVE-2023-52669
- !8380 [sync] PR-8212:  fix CVE-2024-35877
- vhost-vdpa: fix use after free in vhost_vdpa_probe()
- !8294  CVE-2023-52735
- x86/mm/pat: fix VM_PAT handling in COW mappings
- !8196  clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- mptcp: ensure tx skbs always have the MPTCP ext
- locking/ww_mutex/test: Fix potential workqueue corruption
- efi/capsule-loader: fix incorrect allocation size
- perf: hisi: Fix use-after-free when register pmu fails
- !7776 [sync] PR-7717:  CVE-2023-52655
- !8323 [sync] PR-8219:  tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8273  ALSA: hda: Do not unset preset when cleaning up codec
- !8269  drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- !8251 v2  CVE-2024-35956
- gfs2: ignore negated quota changes
- soc: qcom: llcc: Handle a second device without data corruption
- wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- sysv: don't call sb_bread() with pointers_lock held
- tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8277  usb: udc: remove warning when queue disabled ep
- net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8289 [sync] PR-8150:  mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !8265 [sync] PR-8228:  ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- mm/dynamic_hugetlb: refine error info in the destruction
- mm/dynamic_hugetlb: make free_huge_page_to_dhugetlb_pool irq safe
- mm/dynamic_hugetlb: check NULL pointer for early parameter
- mm/dynamic_hugetlb: add lru_add_drain_all() before migration
- mm/dynamic_hugetlb: add cond_resched() in hpool_merge_page()
- mm/dynamic_hugetlb: reduce the number of migration attempts
- mm/dpool: Use helper function to lock/unlock
- drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8231  CVE-2023-52804
- bpf, sockmap: Check for any of tcp_bpf_prots when cloning a listener
- bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself
- drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !7833 [sync] PR-7599:  irqchip/gic-v3-its: Prevent double free on error
- !8259 v5  can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- usb: udc: remove warning when queue disabled ep
- ALSA: hda: Do not unset preset when cleaning up codec
- drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- !7855  clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- btrfs: qgroup: fix qgroup prealloc rsv leak in subvolume operations
- btrfs: fix anon_dev leak in create_subvol()
- ACPI: CPPC: Fix access width used for PCC registers
- ACPI: CPPC: Fix bit_offset shift in MASK_VAL() macro
- ACPI: CPPC: Use access_width over bit_width for system memory accesses
- ACPI: CPPC: Fix up I/O port access in cpc_read()
- ACPI: CPPC: Implement support for SystemIO registers
- crypto: s390/aes - Fix buffer overread in CTR mode
- fs/jfs: Add validity check for db_maxag and db_agpref
- fs: jfs: fix shift-out-of-bounds in dbAllocAG
- !8224  ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- !8125 [sync] PR-8042:  xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- jfs: fix array-index-out-of-bounds in diAlloc
- mmc: sdio: fix possible resource leaks in some error paths
- xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- irqchip/gic-v3-its: Prevent double free on error
- usb: aqc111: check packet for fixup for true limit
- btrfs: send: handle path ref underflow in header iterate_inode_ref()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.79.0.159" date="1718193600">- !8950  aio: fix mremap after fork null-deref
- !8948  CVE-2022-48652
- !8866  ipv6: prevent NULL dereference in ip6_output()
- !8780  smb: client: fix UAF in smb2_reconnect_server()
- !8859  net/smc: avoid data corruption caused by decline
- !8722 v2  SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !8964  Fix CVE-2024-35915
- !8963  Fix CVE-2024-35915
- !8735  mptcp: ensure snd_nxt is properly initialized on connect
- !8761  tipc: fix UAF in error path
- !8741  octeontx2-af: avoid off-by-one read from userspace
- !8953  powerpc/powernv: Add a null pointer check in opal_event_init()
- !8685  mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- !8967  Fix CVE-2024-36949
- !8861  blk-iocost: do not WARN if iocg was already offlined
- !8841 v2  IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- !8945  usb: typec: ucsi: Limit read size on v1.2
- !8905  ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8709 [sync] PR-8046:  block: prevent division by zero in blk_rq_stat_sum()
- !8839  blk-iocost: avoid out of bounds shift
- !8857  PCI/PM: Drain runtime-idle callbacks before driver removal
- amd/amdkfd: sync all devices to wait all processes being evicted
- drm/amdkfd: Rework kfd_locked handling
- !8911  net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- !8915  gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- !8788 [sync] PR-8558:  xen-netfront: Add missing skb_mark_for_recycle
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- powerpc/powernv: Add a null pointer check in opal_event_init()
- aio: fix mremap after fork null-deref
- ice: Fix crash by keep old cfg when update TCs more than queues
- ice: ethtool: Prohibit improper channel config for DCB
- !8880  net: core: reject skb_copy(_expand) for fraglist GSO skbs
- usb: typec: ucsi: Limit read size on v1.2
- !8892  net: fix out-of-bounds access in ops_init
- !8810  net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8672  fix CVE-2024-36021 and CVE-2024-36900
- !8886  CVE-2024-36933
- gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8755  drm/amd/display: Avoid NULL dereference of timing generator
- !8754  pwm: Fix double shift bug
- !8850  ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- net: fix out-of-bounds access in ops_init
- !8665  phonet/pep: fix racy skb_queue_empty() use
- nsh: Restore skb-&gt;{protocol,data,mac_header} for outer header in nsh_gso_segment().
- net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment()
- net: core: reject skb_copy(_expand) for fraglist GSO skbs
- ipv6: prevent NULL dereference in ip6_output()
- blk-iocost: do not WARN if iocg was already offlined
- net/smc: avoid data corruption caused by decline
- PCI/PM: Drain runtime-idle callbacks before driver removal
- ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- !8687  tcp: properly terminate timers for kernel sockets
- !8630  erspan: make sure erspan_base_hdr is present in skb-&gt;head
- IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- blk-iocost: avoid out of bounds shift
- !7988 [sync] PR-7960:  ipv6: Fix infinite recursion in fib6_dump_done().
- !8388 [sync] PR-8300:  ipvlan: add ipvlan_route_v6_outbound() helper
- !8282 [sync] PR-8133:  fix CVE-2021-47265
- !7925 [sync] PR-7741:  ipv4: check for NULL idev in ip_route_use_hint()
- !8724  tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- !8480  scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- !8622  fs/9p: only translate RWX permissions for plain 9P2000
- net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8728  net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8790  Bluetooth: SCO: Fix not validating setsockopt user input
- !8680  rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- !8713 [sync] PR-8583:  mmc: sdhci-msm: pervent access to suspended controller
- !8670  CVE-2024-35854
- Bluetooth: SCO: Fix not validating setsockopt user input
- !8696  clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- !8653 v3  clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- xen-netfront: Add missing skb_mark_for_recycle
- !8571  jfs: fix two array-index-out-of-bounds issuse
- !8356  nilfs2: fix underflow in second superblock position calculations
- !8592  geneve: fix header validation in geneve[6
- !8531  gpiolib: cdev: fix uninitialised kfifo
- smb: client: fix UAF in smb2_reconnect_server()
- !8631 [sync] PR-8519:  mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- tipc: fix UAF in error path
- !8751  ubifs: Check @c-&gt;dirty_[n|p
- drm/amd/display: Avoid NULL dereference of timing generator
- pwm: Fix double shift bug
- !8633 [sync] PR-8425:  CVE-2023-52677
- ubifs: Check @c-&gt;dirty_[n|p]n_cnt and @c-&gt;nroot state under @c-&gt;lp_mutex
- octeontx2-af: avoid off-by-one read from userspace
- !8669  wifi: ath11k: fix dfs radar event locking
- !8619  CVE-2024-35896
- !8608  CVE-2024-35895
- mptcp: ensure snd_nxt is properly initialized on connect
- !8659  wifi: ath11k: fix htt pktlog locking
- !8587  fix CVE-2021-47558
- net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8569  fix CVE-2024-36906
- tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !7933  bpf: Protect against int overflow for stack access size
- !8627 [sync] PR-8561:  mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- !8625 [sync] PR-8497:  Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- mmc: sdhci-msm: pervent access to suspended controller
- !8572  xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- block: prevent division by zero in blk_rq_stat_sum()
- clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- tcp: properly terminate timers for kernel sockets
- mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- net: hns3: fix kernel crash when devlink reload during initialization
- net: hns3: release PTP resources if pf initialization failed
- net: hns3: fix kernel crash when devlink reload during vf initialization
- net: hns3: fix kernel crash when devlink reload during pf initialization
- mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash
- wifi: ath11k: fix dfs radar event locking
- phonet/pep: fix racy skb_queue_empty() use
- wifi: ath11k: fix htt pktlog locking
- clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- !8537  scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- !8538  drm/amdgpu: Fix potential null pointer derefernce
- !8540  s390/dasd: protect device queue against concurrent access
- !8462  i2c: smbus: fix NULL function pointer dereference
- !8432  platform/x86: wmi: Fix opening of char device
- riscv: Check if the code to patch lies in the exit section
- mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- erspan: make sure erspan_base_hdr is present in skb-&gt;head
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- fs/9p: only translate RWX permissions for plain 9P2000
- netfilter: complete validation of user input
- netfilter: validate user input for expected length
- Revert "bpf, sockmap: Prevent lock inversion deadlock in map delete elem"
- bpf: Allow delete from sockmap/sockhash only if update is allowed
- bpf, sockmap: Prevent lock inversion deadlock in map delete elem
- geneve: fix header validation in geneve[6]_xmit_skb
- net: stmmac: Disable Tx queues when reconfiguring the interface
- xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- jfs: fix array-index-out-of-bounds in dbFindLeaf
- fs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev
- ARM: 9381/1: kasan: clear stale stack poison
- s390/dasd: protect device queue against concurrent access
- drm/amdgpu: Fix potential null pointer derefernce
- scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- gpiolib: cdev: fix uninitialised kfifo
- scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- i2c: smbus: fix NULL function pointer dereference
- platform/x86: wmi: Fix opening of char device
- ipvlan: add ipvlan_route_v6_outbound() helper
- nilfs2: fix underflow in second superblock position calculations
- RDMA: Verify port when creating flow rule
- IB/mlx4: Use port iterator and validation APIs
- ipv6: Fix infinite recursion in fib6_dump_done().
- bpf: Protect against int overflow for stack access size
- ipv4: check for NULL idev in ip_route_use_hint()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.80.0.160" date="1718798400">- !9093 v2  ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9031  bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- !9065  afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- !8933  Fix CVE-2023-52732
- !8927 [sync] PR-8222:  Fix CVE-2023-52672
- !9172 [sync] PR-7041:  netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
- !9171 [sync] PR-6994: v2  net/mlx5e: Prevent deadlock while disabling aRFS
- !8733  batman-adv: Avoid infinite loop trying to resize local TT
- !7374 [sync] PR-6879:  net/smc: Fix possible access to freed memory in link clear
- !9098  Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
- net/mlx5e: Prevent deadlock while disabling aRFS
- !9165  genirq: introduce handle_fasteoi_edge_irq flow handler
- genirq: introduce handle_fasteoi_edge_irq for phytium
- genirq: introduce handle_fasteoi_edge_irq flow handler
- !9139 v2  CVE-2024-36971
- !8495  rpmsg: virtio: Free driver_override when rpmsg_remove()
- !9127  hsr: Prevent use after free in prp_create_tagged_frame()
- !9075  Fix UAF problem of hpool
- !9132  mm: swap: fix race between free_swap_and_cache() and swapoff()
- !9130  ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- !9069  Bluetooth: RFCOMM: Fix not validating setsockopt user input
- !8970  mmc: mmc_spi: fix error handling in mmc_spi_probe()
- !8977 [sync] PR-8584:  virtio-blk: fix implicit overflow on virtio_max_dma_size
- !8701  wifi: cfg80211: check A-MSDU format more carefully
- net: fix kabi breakage in struct dst_ops
- net: fix __dst_negative_advice() race
- net: annotate data-races around sk-&gt;sk_dst_pending_confirm
- mm: swap: fix race between free_swap_and_cache() and swapoff()
- ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- hsr: Prevent use after free in prp_create_tagged_frame()
- !9002  scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- !9056  drm/panel: fix a possible null pointer dereference
- !9054  soc: fsl: qbman: Use raw spinlock for cgr_lock
- !8939  clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- !8952  ACPI: video: check for error while searching for backlight device parent
- !8986 [sync] PR-8639:  s390/qeth: Fix kernel panic after setting hsuid
- Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- !8714  Fix page corruption caused by racy check in __free_pages
- ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9080  Bluetooth: L2CAP: Fix not validating setsockopt user input
- Bluetooth: L2CAP: Fix not validating setsockopt user input
- mm/dynamic_hugetlb: use rcu lock to protect hpool
- mm/dynamic_hugetlb: simplify the refcount code
- !9072 [sync] PR-9015:  CVE-2024-36953
- !9071 [sync] PR-9014:  drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr()
- KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id
- drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- Bluetooth: RFCOMM: Fix not validating setsockopt user input
- afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- !8947 [sync] PR-6800:  block: fix overflow in blk_ioctl_discard()
- !9052  CVE-2024-35796
- drm/panel: fix a possible null pointer dereference
- soc: fsl: qbman: Use raw spinlock for cgr_lock
- !9021  wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- net: ll_temac: platform_get_resource replaced by wrong function
- !9048  IB/hfi1: Restore allocated resources on failed copyout
- IB/hfi1: Restore allocated resources on failed copyout
- !9028  tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- !8830  Fix CVE-2024-35951
- !9009  fix CVE-2024-35839
- !9008  tipc: fix a possible memleak in tipc_buf_append
- !8721  CVE-2024-35887
- !8876  drm/vmwgfx: Fix invalid reads in fence signaled events
- !8884  scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- !8922  hugetlbfs: fix hugetlbfs_statfs() locking
- bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- netfilter: bridge: replace physindev with physinif in nf_bridge_info
- netfilter: propagate net to nf_bridge_get_physindev
- netfilter: nfnetlink_log: use proper helper for fetching physinif
- !8662  usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group
- tipc: fix a possible memleak in tipc_buf_append
- !8617 [sync] PR-8472:  fix CVE-2024-27415
- !8983  fix CVE-2024-36905
- scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- s390/qeth: Fix kernel panic after setting hsuid
- net: relax socket state check at accept time.
- tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets
- virtio-blk: fix implicit overflow on virtio_max_dma_size
- mmc: mmc_spi: fix error handling in mmc_spi_probe()
- ACPI: video: check for error while searching for backlight device parent
- block: fix overflow in blk_ioctl_discard()
- clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- ceph: blocklist the kclient when receiving corrupted snap trace
- ceph: shut down access to inode when async create fails
- ceph: refactor remove_session_caps_cb
- ceph: fix auth cap handling logic in remove_session_caps_cb
- ceph: drop private list from remove_session_caps_cb
- pipe: wakeup wr_wait after setting max_usage
- fs/pipe: move check to pipe_has_watch_queue()
- hugetlbfs: fix hugetlbfs_statfs() locking
- scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- drm/vmwgfx: Fix invalid reads in fence signaled events
- drm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr()
- drm/panfrost: Fix the panfrost_mmu_map_fault_addr() error path
- batman-adv: Avoid infinite loop trying to resize local TT
- ax25: fix use-after-free bugs caused by ax25_ds_del_timer
- Fix page corruption caused by racy check in __free_pages
- wifi: cfg80211: check A-MSDU format more carefully
- usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group
- netfilter: br_netfilter: skip conntrack input hook for promisc packets
- netfilter: bridge: confirm multicast packets before passing them up the stack
- rpmsg: virtio: Free driver_override when rpmsg_remove()
- net/smc: Fix possible access to freed memory in link clear</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.80.0.161" date="1718884800">- Add the pub key in openEuler RPM-PGP certificate</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.81.0.162" date="1719403200">- !8104 [sync] PR-7886:  drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- !9443  net/mlx5: Discard command completions in internal error
- !9448  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9432  hid: cp2112: Fix duplicate workqueue initialization
- !9424  ASoC: SOF: Fix DSP oops stack dump output contents
- !9418 [sync] PR-6683: v2  CVE-2024-26921
- !9296  CVE-2021-47599
- !9403  Fix CVE-2024-31076
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- !9198  init/main.c: Fix potential static_command_line memory overflow
- hid: cp2112: Fix duplicate workqueue initialization
- ASoC: SOF: Fix DSP oops stack dump output contents
- !6742 [sync] PR-6654:  net/ipv6: avoid possible UAF in ip6_route_mpath_notify()
- sk_buff: Fix KABI break for the modification of struct sk_buff
- inet: inet_defrag: prevent sk release while still in use
- net: Fix KABI break for introducing is_skb_wmem()
- skb_expand_head() adjust skb-&gt;truesize incorrectly
- skbuff: introduce skb_expand_head()
- !9349  powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9396  RDMA/hns: Fix deadlock on SRQ async events.
- !9353 [sync] PR-9305:  CVE-2024-26661 following bugfix
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- !9359  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9379  RDMA/hns: Fix UAF for cq async event
- !9291  net: bridge: xmit: make sure we have at least eth header len bytes
- RDMA/hns: Fix deadlock on SRQ async events.
- !9049 [sync] PR-8774:  CVE-2024-36914
- !9263  ring-buffer: Fix a race between readers and resize checks
- RDMA/hns: Fix UAF for cq async event
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- Revert "drm/amd/display: Fix &amp;&amp; vs || typos"
- powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9272  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9274  wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- !9281  drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- !9279  net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- !9213 [sync] PR-9112:  Backport some optimizing patches for kunpeng920
- !9106  ksmbd: no response from compound read
- !9185  spi: Fix deadlock when adding SPI controllers on SPI buses
- net: bridge: xmit: make sure we have at least eth header len bytes
- drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- ring-buffer: Fix a race between readers and resize checks
- !9181  wifi: wilc1000: fix RCU usage in connect path
- !9214  drm/amd/display: Fix division by zero in setup_dsc_config
- !7541 [sync] PR-6801:  block: fix discard
- !9142 v2  CVE-2023-52810
- !8460 [sync] PR-8069:  CVE-2021-47427
- !9155  fix CVE-2023-52791
- !9169  UBIFS: fixes a series of issues that caused by power cut
- !9003  media: tc358743: register v4l2 async device only after successful setup
- !9088  fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Fix division by zero in setup_dsc_config
- arm64: syscall: unmask DAIF for tracing status
- arm64: Snapshot thread flags
- sched: Snapshot thread flags
- entry: Snapshot thread flags
- x86: Snapshot thread flags
- thread_info: Add helpers to snapshot thread flags
- irqchip/gic-v3: Use dsb(ishst) to order writes with ICC_SGI1R_EL1 accesses
- sched/fair: Optimize test_idle_cores() for !SMT
- init/main.c: Fix potential static_command_line memory overflow
- spi: fix kabi breakage in struct spi_controller
- spi: fix use-after-free of the add_lock mutex
- spi: Fix deadlock when adding SPI controllers on SPI buses
- wifi: wilc1000: fix RCU usage in connect path
- ubifs: dbg_orphan_check: Fix missed key type checking
- ubifs: Fix unattached inode when powercut happens in creating
- ubifs: Fix space leak when powercut happens in linking tmpfile
- ubifs: Move ui-&gt;data initialization after initializing security
- ubifs: Fix adding orphan entry twice for the same inode
- ubifs: Remove insert_dead_orphan from replaying orphan process
- ubifs: Don't add xattr inode into orphan area
- ubifs: Fix unattached xattr inode if powercut happens after deleting
- ubifs: Fix some kernel-doc comments
- ubifs: Fix spelling mistakes
- i2c: core: Fix atomic xfer check for non-preempt config
- i2c: core: Run atomic i2c xfer when !preemptible
- fs/jfs: Add check for negative db_l2nbperpage
- jfs: jfs_dmap: Validate db_l2nbperpage while mounting
- ksmbd: no response from compound read
- fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Skip on writeback when it's not applicable
- media: tc358743: register v4l2 async device only after successful setup
- scsi: iscsi: Fix iscsi_task use after free
- scsi: iscsi: Have abort handler get ref to conn
- drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- block: check io size before submit discard
- block: fix overflow in blk_ioctl_discard()
- net/ipv6: avoid possible UAF in ip6_route_mpath_notify()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.82.0.163" date="1719403201">- !9461 [sync] PR-5860:  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9197  scsi: core: Fix unremoved procfs host directory regression
- !9203  dyndbg: fix old BUG_ON in &gt;control parser
- !9195  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9200  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9189  clk: Fix clk_core_get NULL dereference
- !9187  net: phy: fix phy_get_internal_delay accessing an empty array
- !9460 v2  CVE-2024-27032
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- scsi: core: Fix unremoved procfs host directory regression
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.83.0.164" date="1720008000">- !9159  xfs: don't use current-&gt;journal_info
- !9659  fix uaf when proc_cpuset_show
- !9574 [sync] PR-8683: v4  Fix CVE-2024-35879
- !9531  CVE-2024-37356
- !9650  RDMA/hns: Modify the print level of CQE error
- !9495  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- RDMA/hns: Modify the print level of CQE error
- !9515  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9604 [sync] PR-9595:  drm/arm/malidp: fix a possible null pointer dereference
- !9603 [sync] PR-9593:  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9602 [sync] PR-9504:  um: Add winch to winch_handlers before registering winch IRQ
- !9601  CVE-2024-38597
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- um: Add winch to winch_handlers before registering winch IRQ
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9575 [sync] PR-9321:  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9586 [sync] PR-9284:  of: module: add buffer overflow check in of_modalias()
- !9589  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- of: module: add buffer overflow check in of_modalias()
- !9541  net/mlx5e: Avoid field-overflowing memcpy()
- !9480  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9579 [sync] PR-9558:  CVE-2024-39362
- !8565 [sync] PR-8240: v2  dmaengine: idxd: Fix oops during rmmod on single-CPU platforms
- !9545  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9576 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9384  serial: max3100: Update uart_driver_registered on driver removal
- !9564  fs/ntfs3: Check 'folio' pointer for NULL
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- drm/amd/display: Fix potential index out of bounds in color transformation function
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()
- !9484  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9529  media: lgdt3306a: Add a check against null-pointer-def
- fs/ntfs3: Check 'folio' pointer for NULL
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- !9375  ALSA: core: Fix NULL module pointer assignment at card init
- !9468  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9458  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- !9431  CVE-2022-48703
- !9364  fs/ntfs3: Use variable length array instead of fixed size
- media: lgdt3306a: Add a check against null-pointer-def
- !9411  kprobes: Fix possible use-after-free issue on kprobe registration
- !8743  ext4 bugfix from mainline
- !9498  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9397 [sync] PR-9350:  tracing: Fix permissions for the buffer_percent file
- !9334  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8712  ubifs: Set page uptodate in the correct place
- !9259  Fix CVE-2024-38588
- !9385  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9454  jffs2: prevent xattr node from overflowing the eraseblock
- !9328  CVE-2024-38596
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- kprobes: Fix possible use-after-free issue on kprobe registration
- tracing: Fix permissions for the buffer_percent file
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- af_unix: Fix data-races around sk-&gt;sk_shutdown.
- af_unix: Fix data races around sk-&gt;sk_shutdown.
- ftrace: Fix possible use-after-free issue in ftrace_location()
- ftrace: Fix possible warning on checking all pages used in ftrace_process_locs()
- ftrace: Store the order of pages allocated in ftrace_page
- xfs: don't use current-&gt;journal_info
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- ubifs: Set page uptodate in the correct place
- dmaengine: idxd: Fix oops during rmmod on single-CPU platforms</changelog>
</package>
<package pkgid="88e136f028d13e72d333b4a9a42d39d6ee8e7e7a32429ef56ebecfc825e47e22" name="kernel" arch="src">
  <version epoch="0" ver="5.10.0" rel="136.84.0.165.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.76.0.156" date="1716379200">- !7634  spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- !7642  hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- !7724  CVE-2024-27002
- !7706  pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- !7618 [sync] PR-5930:  RDMA/srpt: Support specifying the srpt_service_guid parameter
- !6243 [sync] PR-6082:  can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- !6153 [sync] PR-6020:  net/sched: act_mirred: use the backlog for mirred ingress
- !7621 [sync] PR-6259:  arp: Prevent overflow in arp_req_get().
- !7616 [sync] PR-5993:  ipv6: sr: fix possible use-after-free and null-ptr-deref
- !7613 [sync] PR-5996:  mptcp: fix double-free on socket dismantle
- !6223 [sync] PR-6074:  Fix CVE-2024-26787
- !7610 [sync] PR-6279:  Bluetooth: Avoid potential use-after-free in hci_error_reset
- !7380 [sync] PR-6085:  netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- !7377 [sync] PR-6086:  netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- !5984 [sync] PR-5852:  CVE-2024-26809
- !7708  bpf: Guard stack limits against 32bit overflow
- !7637  dm-crypt: don't modify the data when using authenticated encryption
- !7623 [sync] PR-6033:  gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- !7696  ext4: fix corruption during on-line resize
- !7703  pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- !7628 [sync] PR-5950:  RDMA/qedr: Fix qedr_create_user_qp error flow
- clk: mediatek: Do a runtime PM get on controllers during probe
- !6532 [sync] PR-6486:  devlink: fix possible use-after-free and memory leaks in devlink_init()
- !7554 [sync] PR-5530:  net: Fix CVE-2024-26641
- !7551 [sync] PR-7006:  wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7667 [sync] PR-7586:  powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- bpf: Guard stack limits against 32bit overflow
- pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- ext4: fix corruption during on-line resize
- !7604  cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7512 [sync] PR-7408:  backport important fix for broadcom net card
- !7510 [sync] PR-7407:  nvme-fc: do not wait in vain when unloading module
- !7513 [sync] PR-7406:  drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- !7508 [sync] PR-7402:  scsi: lpfc: Fix possible file string name overflow when updating firmware
- !7507 [sync] PR-7404:  scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- !7503 [sync] PR-7403:  scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- !7523 [sync] PR-7401:  nvme-core: check for too small lba shift
- !7499 [sync] PR-7396:  drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- !7493 [sync] PR-7398:  drm/amd/display: Fix memory leak in dm_sw_fini()
- !7490 [sync] PR-7399:  drm/amd/pm: fix a double-free in si_dpm_init
- !7496 [sync] PR-7397:  drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7590  drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7597 [sync] PR-7548:  btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7564  net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- dm-crypt: don't modify the data when using authenticated encryption
- spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- dm-crypt: don't modify the data when using authenticated encryption
- RDMA/qedr: Fix qedr_create_user_qp error flow
- gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- arp: Prevent overflow in arp_req_get().
- RDMA/srpt: Support specifying the srpt_service_guid parameter
- ipv6: sr: fix possible use-after-free and null-ptr-deref
- mptcp: fix double-free on socket dismantle
- Bluetooth: Avoid potential use-after-free in hci_error_reset
- cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7557 [sync] PR-7520:  drm/i915/gt: Reset queue_priority_hint on parking
- drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7363 [sync] PR-5491:  CVE-2024-26640
- !6553  fixup CVE-2024-26908
- !7535 v2  CVE-2024-26907
- net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- drm/i915/gt: Reset queue_priority_hint on parking
- ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()
- ip6_tunnel: use dev_sw_netstats_rx_add()
- wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7518 [sync] PR-7484:  fix CVE-2024-26661
- kernel-doc: fix struct_group_tagged() parsing
- uapi: propagate __struct_group() attributes to the container union
- RDMA/mlx5: Fix fortify source warning while accessing Eth segment
- uapi: stddef.h: Fix __DECLARE_FLEX_ARRAY for C++
- stddef: Introduce DECLARE_FLEX_ARRAY() helper
- uapi/linux/stddef.h: Add include guards
- stddef: Introduce struct_group() helper macro
- !7516 [sync] PR-7483:  Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- !7355  blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- !7347  PM / devfreq: Synchronize devfreq_monitor_[start/stop
- !7357  sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- !7443 [sync] PR-6037:  fix-CVE-2024-26706
- nvme-core: check for too small lba shift
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Add NULL test for 'timing generator' in 'dcn21_set_pipe()'
- !7486 [sync] PR-7476:  firewire: nosy: ensure user_length is taken into account when fetching packet contents
- Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- net/tg3: fix race condition in tg3_reset_task()
- net/tg3: resolve deadlock in tg3_reset_task() during EEH
- net: bnxt: fix a potential use-after-free in bnxt_init_tc
- net/bnx2x: Prevent access to a freed page in page_pool
- nvme-fc: do not wait in vain when unloading module
- scsi: lpfc: Fix possible file string name overflow when updating firmware
- scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- drm/amd/display: Fix memory leak in dm_sw_fini()
- drm/amd/pm: fix a double-free in si_dpm_init
- !7295  KVM: s390: vsie: fix race during shadow creation
- firewire: nosy: ensure user_length is taken into account when fetching packet contents
- !7257  netfilter: nf_tables: disallow anonymous set with timeout flag
- !7336  inet: read sk-&gt;sk_family once in inet_recv_error()
- !7329  tunnels: fix out of bounds access when building IPv6 PMTU error
- !7324  net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- !7311  btrfs: don't drop extent_map for free space inode on write error
- !7449 [sync] PR-5998:  net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- !7446 [sync] PR-6031:  nilfs2: fix potential bug in end_buffer_async_write
- !7276  llc: Drop support for ETH_P_TR_802_2.
- !7281  llc: make llc_ui_sendmsg() more robust against bonding changes
- !7457  netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7263  Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- !7479 [sync] PR-7424:  net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- !7343  ppp_async: limit MRU to 64K
- !5867 [sync] PR-5794:  um: time-travel: fix time corruption
- !7390 [sync] PR-5469:  wifi: iwlwifi: fix a memory corruption
- !7313  CVE-2024-26686
- !7301  nilfs2: fix data corruption in dsync block recovery for small block sizes
- !7298  powerpc/kasan: Fix addr error caused by page alignment
- !7274  binder: fix race between mmput() and do_exit()
- !7261  ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- !5623 [sync] PR-5566:  tracing: Ensure visibility when inserting an element into tracing_map
- !7241  SUNRPC: Fix a suspicious RCU usage warning
- !7231 [sync] PR-5460: v2  crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- !7240  bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- !7319  mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- !7467 [sync] PR-7394: v2  scsi: sr: Do not leak information in ioctl
- scsi: sr: Do not leak information in ioctl
- !7020 [sync] PR-6855:  KVM: Always flush async #PF workqueue when vCPU is being destroyed
- !7307  iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7427  net: gtp: Fix Use-After-Free in gtp_dellink
- !7431 [sync] PR-3972:  arm64: make cma=0 as default for openeuler
- net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- nilfs2: fix potential bug in end_buffer_async_write
- parisc/unaligned: Fix emulate_ldw() breakage
- parisc/unaligned: Rewrite 64-bit inline assembly of emulate_ldd()
- parisc: Fix random data corruption from exception handler
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_sth()
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_ldd()
- parisc/unaligned: Rewrite inline assembly of emulate_ldw()
- parisc: Mark ex_table entries 32-bit aligned in uaccess.h
- parisc: Fix some apparent put_user() failures
- parisc: Implement __get/put_kernel_nofault()
- parisc: Drop strnlen_user() in favour of generic version
- parisc: Switch user access functions to signal errors in r29 instead of r8
- parisc/unaligned: Rewrite inline assembly of emulate_ldh()
- parisc/unaligned: Use EFAULT fixup handler in unaligned handlers
- !7436 [sync] PR-7414:  clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- arm64: make cma=0 as default for openeuler
- net: gtp: Fix Use-After-Free in gtp_dellink
- !7383 [sync] PR-6428:  net/sched: flower: Fix unable to handle page fault bug in fl_init
- !7267  block/rnbd-srv: Check for unlikely string overflow
- wifi: iwlwifi: fix a memory corruption
- net/sched: flower: Fix unable to handle page fault bug in fl_init
- netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- tcp: add sanity checks to rx zerocopy
- net-zerocopy: Refactor frag-is-remappable test.
- sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- PM / devfreq: Synchronize devfreq_monitor_[start/stop]
- ppp_async: limit MRU to 64K
- inet: read sk-&gt;sk_family once in inet_recv_error()
- tunnels: fix out of bounds access when building IPv6 PMTU error
- net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- fs/proc: do_task_stat: use sig-&gt;stats_lock to gather the threads/children stats
- fs/proc: do_task_stat: use __for_each_thread()
- fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- exit: Use the correct exit_code in /proc/&lt;pid&gt;/stat
- btrfs: don't drop extent_map for free space inode on write error
- iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- nilfs2: fix data corruption in dsync block recovery for small block sizes
- powerpc/kasan: Fix addr error caused by page alignment
- KVM: s390: vsie: fix race during shadow creation
- llc: make llc_ui_sendmsg() more robust against bonding changes
- llc: Drop support for ETH_P_TR_802_2.
- binder: fix race between mmput() and do_exit()
- block/rnbd-srv: Check for unlikely string overflow
- Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- netfilter: nf_tables: disallow anonymous set with timeout flag
- SUNRPC: Fix a suspicious RCU usage warning
- bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- KVM: Always flush async #PF workqueue when vCPU is being destroyed
- x86/xen: Add some null pointer checking to smp.c
- devlink: fix possible use-after-free and memory leaks in devlink_init()
- mmc: mmci: stm32: fix DMA API overlapping mappings warning
- mmc: mmci: stm32: use a buffer for unaligned DMA requests
- net/sched: act_mirred: use the backlog for mirred ingress
- netfilter: nft_set_pipapo: release elements in clone only from destroy path
- netfilter: nft_set_pipapo: remove scratch_aligned pointer
- netfilter: nft_set_pipapo: add helper to release pcpu scratch area
- netfilter: nft_set_pipapo: store index in scratch maps
- um: time-travel: fix time corruption
- tracing: Ensure visibility when inserting an element into tracing_map</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.77.0.157" date="1716984000">- !8099  Fix CVE-2023-52854
- !8045  drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- !8148  pinctrl: single: fix potential NULL dereference
- !8157 [sync] PR-8017:  perf/core: Bail out early if the request AUX area is out of bound
- !8114 [sync] PR-8023:  fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !8093 [sync] PR-7980:  Fix CVE-2021-47455
- !8117 [sync] PR-8060:  soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- !7799  net-memcg: Fix scope of sockmem pressure indicators
- !8087 [sync] PR-8019:  pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8095 [sync] PR-7143:  media: usbtv: Remove useless locks in usbtv_video_free()
- !7134 [sync] PR-7092:  Squashfs: check the inode number is not the invalid value of zero
- perf/core: Bail out early if the request AUX area is out of bound
- !8132  scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- pinctrl: single: fix potential NULL dereference
- !8083 [sync] PR-6808:  CVE-2024-26923
- !8003 [sync] PR-7970:  fbmon: prevent division by zero in fb_videomode_from_videomode()
- scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- !6875 [sync] PR-6756:  vfio/fsl-mc: Block calling interrupt handler without trigger
- soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !7879 [sync] PR-7684:  dm snapshot: fix lockup in dm_exception_table_exit
- !8072 [sync] PR-8030:  netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- padata: Fix refcnt handling in padata_free_shell()
- padata: Convert from atomic_t to refcount_t on parallel_data-&gt;refcnt
- !7995  HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !8041  media: vidtv: mux: Add check and kfree for kstrdup
- media: usbtv: Remove useless locks in usbtv_video_free()
- ptp: fix code indentation issues
- ptp: Fix possible memory leak in ptp_clock_register()
- !7962  hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8020  media: bttv: fix use after free error due to btv-&gt;timeout timer
- af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc().
- af_unix: Fix garbage collector racing against connect()
- !8026 [sync] PR-7961:  net: atlantic: eliminate double free in error handling logic
- !7945  crypto: engine - fix crypto_queue backlog handling
- netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- !8034  clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- media: vidtv: mux: Add check and kfree for kstrdup
- clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- !8005 [sync] PR-7903:  virtio_ring : keep used_wrap_counter in
- net: atlantic: eliminate double free in error handling logic
- media: bttv: fix use after free error due to btv-&gt;timeout timer
- virtio_ring : keep used_wrap_counter in vq-&gt;last_used_idx
- fbmon: prevent division by zero in fb_videomode_from_videomode()
- HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !7954  media: vidtv: psi: Add check for kstrdup
- !7973 [sync] PR-7949:  drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- !7968 [sync] PR-7943: v2  netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7939 v2  pstore/platform: Add check for kstrdup
- drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7936 [sync] PR-7911:  ACPI: LPIT: Avoid u32 multiplication overflow
- !7850 [sync] PR-7576:  f2fs: compress: fix reserve_cblocks counting error when out of space
- !7862 [sync] PR-7757:  Fix CVE-2023-52656
- hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- media: vidtv: psi: Add check for kstrdup
- crypto: engine - fix crypto_queue backlog handling
- !7914 [sync] PR-7853:  net/mlx5e: fix a double-free in arfs_create_groups
- pstore/platform: Add check for kstrdup
- ACPI: LPIT: Avoid u32 multiplication overflow
- !7787 [sync] PR-7655: v3  KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7906 [sync] PR-7877: v4  eeprom: at24: fix memory corruption race condition
- net/mlx5e: fix a double-free in arfs_create_groups
- !7897  Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- eeprom: at24: fix memory corruption race condition
- !7796 [sync] PR-7743:  netrom: Fix data-races around sysctl_net_busy_read
- !7884 [sync] PR-7773:  Fix CVE-2023-52698
- Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- calipso: fix memory leak in netlbl_calipso_add_pass()
- netlabel: remove unused parameter in netlbl_netlink_auditinfo()
- net: netlabel: Fix kerneldoc warnings
- dm snapshot: fix lockup in dm_exception_table_exit
- !7859 [sync] PR-7846:  netrom: Fix a data-race around sysctl_netrom_transport_timeout
- io_uring: drop any code related to SCM_RIGHTS
- io_uring/unix: drop usage of io_uring socket
- netrom: Fix a data-race around sysctl_netrom_transport_timeout
- !7778 [sync] PR-7749: v2  wifi: iwlwifi: dbg-tlv: ensure NUL termination
- f2fs: compress: fix reserve_cblocks counting error when out of space
- !7829 [sync] PR-7779:  LoongArch: Define the __io_aw() hook as mmiowb()
- !7826 [sync] PR-7714:  CVE-2024-35936
- !7837 [sync] PR-7681:  xfs: three bug fix recently
- xfs: update dir3 leaf block metadata after swap
- xfs: ensure logflagsp is initialized in xfs_bmap_del_extent_real
- iomap: fix warning in xfs_iomap_write_delalloc_release()
- !7747  x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- !7819 [sync] PR-7734:  mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- LoongArch: Define the __io_aw() hook as mmiowb()
- btrfs: add missing mutex_unlock in btrfs_relocate_sys_chunks()
- btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks()
- mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- net-memcg: Fix scope of sockmem pressure indicators
- netrom: Fix data-races around sysctl_net_busy_read
- KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7768  net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: iwlwifi: dbg-tlv: ensure NUL termination
- !7711 [sync] PR-7579:  powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- !7755  wifi: ath11k: decrease MHI channel buffer length to 8KB
- net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: ath11k: decrease MHI channel buffer length to 8KB
- x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Squashfs: check the inode number is not the invalid value of zero
- vfio/fsl-mc: Block calling interrupt handler without trigger</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.78.0.158" date="1717588800">- !8594 [sync] PR-6990:  netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- !8591 [sync] PR-7174:  CVE-2022-48689
- !8595 [sync] PR-6939:  USB: core: Fix deadlock in usb_deauthorize_interface()
- !8554 [sync] PR-8395:  5.10: fix CVE-2024-35978
- !8364  perf: hisi: Fix use-after-free when register pmu fails
- !8606  smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- !7672  btrfs: send: handle path ref underflow in header iterate_inode_ref()
- !8597 [sync] PR-6393:  crypto: xilinx - call finalize with bh disabled
- !8514  net: ena: Fix incorrect descriptor free behavior
- !8563 [sync] PR-8110:  drm/client: Fully protect modes[
- smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- crypto: xilinx - call finalize with bh disabled
- USB: core: Fix deadlock in usb_deauthorize_interface()
- netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- tcp: TX zerocopy should not sense pfmemalloc status
- net: skbuff: update comment about pfmemalloc propagating
- net: introduce __skb_fill_page_desc_noacc
- tcp: factor out tcp_build_frag()
- !8505  CVE: CVE-2024-36015
- drm/client: Fully protect modes[] with dev-&gt;mode_config.mutex
- !8523  tty: vcc: Add check for kstrdup() in vcc_probe()
- !8487 [sync] PR-8397:  mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- !8486 [sync] PR-8373:  dma-direct: Leak pages on dma_set_decrypted() failure
- !8245 [sync] PR-7870:  CVE-2024-35995
- Bluetooth: Fix memory leak in hci_req_sync_complete()
- !8202  arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- !8408  pinctrl: core: delete incorrect free in pinctrl_enable()
- tty: vcc: Add check for kstrdup() in vcc_probe()
- net: ena: Fix incorrect descriptor free behavior
- !8457 [sync] PR-8416:  iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- !8501 [sync] PR-7889:  vt: fix unicode buffer corruption when deleting characters
- ppdev: Add an error check in register_device
- ppdev: Remove usage of the deprecated ida_simple_xx() API
- vt: fix unicode buffer corruption when deleting characters
- mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- dma-direct: Leak pages on dma_set_decrypted() failure
- !8429  drm/amdgpu: Fix even more out of bound writes from debugfs
- !8340  soc: qcom: llcc: Handle a second device without data corruption
- !8369  efi/capsule-loader: fix incorrect allocation size
- !8312 [sync] PR-8039: v2  dynamic_hugetlb: backport some bugfix
- !8451 [sync] PR-8342:  net/mlx5: Properly link new fs rules into the tree
- !8293  drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- net/mlx5: Properly link new fs rules into the tree
- !8179  jfs: fix array-index-out-of-bounds in diAlloc
- !8167 v2  mmc: sdio: fix possible resource leaks in some error paths
- !8346 [sync] PR-8248:  gfs2: ignore negated quota changes
- !8331 [sync] PR-8254:  sysv: don't call sb_bread() with pointers_lock held
- !8375 [sync] PR-8306:  mptcp: ensure tx skbs always have the MPTCP ext
- drm/amdgpu: Fix even more out of bound writes from debugfs
- !8391 [sync] PR-8109:  vhost-vdpa: fix use after free in vhost_vdpa_probe()
- pinctrl: core: delete incorrect free in pinctrl_enable()
- !8370  locking/ww_mutex/test: Fix potential workqueue corruption
- !8311  drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8334  wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- !8317  net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8235 [sync] PR-8054:  CVE-2023-52669
- !8380 [sync] PR-8212:  fix CVE-2024-35877
- vhost-vdpa: fix use after free in vhost_vdpa_probe()
- !8294  CVE-2023-52735
- x86/mm/pat: fix VM_PAT handling in COW mappings
- !8196  clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- mptcp: ensure tx skbs always have the MPTCP ext
- locking/ww_mutex/test: Fix potential workqueue corruption
- efi/capsule-loader: fix incorrect allocation size
- perf: hisi: Fix use-after-free when register pmu fails
- !7776 [sync] PR-7717:  CVE-2023-52655
- !8323 [sync] PR-8219:  tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8273  ALSA: hda: Do not unset preset when cleaning up codec
- !8269  drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- !8251 v2  CVE-2024-35956
- gfs2: ignore negated quota changes
- soc: qcom: llcc: Handle a second device without data corruption
- wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- sysv: don't call sb_bread() with pointers_lock held
- tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8277  usb: udc: remove warning when queue disabled ep
- net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8289 [sync] PR-8150:  mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !8265 [sync] PR-8228:  ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- mm/dynamic_hugetlb: refine error info in the destruction
- mm/dynamic_hugetlb: make free_huge_page_to_dhugetlb_pool irq safe
- mm/dynamic_hugetlb: check NULL pointer for early parameter
- mm/dynamic_hugetlb: add lru_add_drain_all() before migration
- mm/dynamic_hugetlb: add cond_resched() in hpool_merge_page()
- mm/dynamic_hugetlb: reduce the number of migration attempts
- mm/dpool: Use helper function to lock/unlock
- drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8231  CVE-2023-52804
- bpf, sockmap: Check for any of tcp_bpf_prots when cloning a listener
- bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself
- drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !7833 [sync] PR-7599:  irqchip/gic-v3-its: Prevent double free on error
- !8259 v5  can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- usb: udc: remove warning when queue disabled ep
- ALSA: hda: Do not unset preset when cleaning up codec
- drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- !7855  clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- btrfs: qgroup: fix qgroup prealloc rsv leak in subvolume operations
- btrfs: fix anon_dev leak in create_subvol()
- ACPI: CPPC: Fix access width used for PCC registers
- ACPI: CPPC: Fix bit_offset shift in MASK_VAL() macro
- ACPI: CPPC: Use access_width over bit_width for system memory accesses
- ACPI: CPPC: Fix up I/O port access in cpc_read()
- ACPI: CPPC: Implement support for SystemIO registers
- crypto: s390/aes - Fix buffer overread in CTR mode
- fs/jfs: Add validity check for db_maxag and db_agpref
- fs: jfs: fix shift-out-of-bounds in dbAllocAG
- !8224  ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- !8125 [sync] PR-8042:  xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- jfs: fix array-index-out-of-bounds in diAlloc
- mmc: sdio: fix possible resource leaks in some error paths
- xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- irqchip/gic-v3-its: Prevent double free on error
- usb: aqc111: check packet for fixup for true limit
- btrfs: send: handle path ref underflow in header iterate_inode_ref()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.79.0.159" date="1718193600">- !8950  aio: fix mremap after fork null-deref
- !8948  CVE-2022-48652
- !8866  ipv6: prevent NULL dereference in ip6_output()
- !8780  smb: client: fix UAF in smb2_reconnect_server()
- !8859  net/smc: avoid data corruption caused by decline
- !8722 v2  SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !8964  Fix CVE-2024-35915
- !8963  Fix CVE-2024-35915
- !8735  mptcp: ensure snd_nxt is properly initialized on connect
- !8761  tipc: fix UAF in error path
- !8741  octeontx2-af: avoid off-by-one read from userspace
- !8953  powerpc/powernv: Add a null pointer check in opal_event_init()
- !8685  mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- !8967  Fix CVE-2024-36949
- !8861  blk-iocost: do not WARN if iocg was already offlined
- !8841 v2  IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- !8945  usb: typec: ucsi: Limit read size on v1.2
- !8905  ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8709 [sync] PR-8046:  block: prevent division by zero in blk_rq_stat_sum()
- !8839  blk-iocost: avoid out of bounds shift
- !8857  PCI/PM: Drain runtime-idle callbacks before driver removal
- amd/amdkfd: sync all devices to wait all processes being evicted
- drm/amdkfd: Rework kfd_locked handling
- !8911  net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- !8915  gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- !8788 [sync] PR-8558:  xen-netfront: Add missing skb_mark_for_recycle
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- powerpc/powernv: Add a null pointer check in opal_event_init()
- aio: fix mremap after fork null-deref
- ice: Fix crash by keep old cfg when update TCs more than queues
- ice: ethtool: Prohibit improper channel config for DCB
- !8880  net: core: reject skb_copy(_expand) for fraglist GSO skbs
- usb: typec: ucsi: Limit read size on v1.2
- !8892  net: fix out-of-bounds access in ops_init
- !8810  net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8672  fix CVE-2024-36021 and CVE-2024-36900
- !8886  CVE-2024-36933
- gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8755  drm/amd/display: Avoid NULL dereference of timing generator
- !8754  pwm: Fix double shift bug
- !8850  ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- net: fix out-of-bounds access in ops_init
- !8665  phonet/pep: fix racy skb_queue_empty() use
- nsh: Restore skb-&gt;{protocol,data,mac_header} for outer header in nsh_gso_segment().
- net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment()
- net: core: reject skb_copy(_expand) for fraglist GSO skbs
- ipv6: prevent NULL dereference in ip6_output()
- blk-iocost: do not WARN if iocg was already offlined
- net/smc: avoid data corruption caused by decline
- PCI/PM: Drain runtime-idle callbacks before driver removal
- ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- !8687  tcp: properly terminate timers for kernel sockets
- !8630  erspan: make sure erspan_base_hdr is present in skb-&gt;head
- IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- blk-iocost: avoid out of bounds shift
- !7988 [sync] PR-7960:  ipv6: Fix infinite recursion in fib6_dump_done().
- !8388 [sync] PR-8300:  ipvlan: add ipvlan_route_v6_outbound() helper
- !8282 [sync] PR-8133:  fix CVE-2021-47265
- !7925 [sync] PR-7741:  ipv4: check for NULL idev in ip_route_use_hint()
- !8724  tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- !8480  scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- !8622  fs/9p: only translate RWX permissions for plain 9P2000
- net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8728  net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8790  Bluetooth: SCO: Fix not validating setsockopt user input
- !8680  rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- !8713 [sync] PR-8583:  mmc: sdhci-msm: pervent access to suspended controller
- !8670  CVE-2024-35854
- Bluetooth: SCO: Fix not validating setsockopt user input
- !8696  clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- !8653 v3  clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- xen-netfront: Add missing skb_mark_for_recycle
- !8571  jfs: fix two array-index-out-of-bounds issuse
- !8356  nilfs2: fix underflow in second superblock position calculations
- !8592  geneve: fix header validation in geneve[6
- !8531  gpiolib: cdev: fix uninitialised kfifo
- smb: client: fix UAF in smb2_reconnect_server()
- !8631 [sync] PR-8519:  mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- tipc: fix UAF in error path
- !8751  ubifs: Check @c-&gt;dirty_[n|p
- drm/amd/display: Avoid NULL dereference of timing generator
- pwm: Fix double shift bug
- !8633 [sync] PR-8425:  CVE-2023-52677
- ubifs: Check @c-&gt;dirty_[n|p]n_cnt and @c-&gt;nroot state under @c-&gt;lp_mutex
- octeontx2-af: avoid off-by-one read from userspace
- !8669  wifi: ath11k: fix dfs radar event locking
- !8619  CVE-2024-35896
- !8608  CVE-2024-35895
- mptcp: ensure snd_nxt is properly initialized on connect
- !8659  wifi: ath11k: fix htt pktlog locking
- !8587  fix CVE-2021-47558
- net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8569  fix CVE-2024-36906
- tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !7933  bpf: Protect against int overflow for stack access size
- !8627 [sync] PR-8561:  mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- !8625 [sync] PR-8497:  Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- mmc: sdhci-msm: pervent access to suspended controller
- !8572  xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- block: prevent division by zero in blk_rq_stat_sum()
- clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- tcp: properly terminate timers for kernel sockets
- mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- net: hns3: fix kernel crash when devlink reload during initialization
- net: hns3: release PTP resources if pf initialization failed
- net: hns3: fix kernel crash when devlink reload during vf initialization
- net: hns3: fix kernel crash when devlink reload during pf initialization
- mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash
- wifi: ath11k: fix dfs radar event locking
- phonet/pep: fix racy skb_queue_empty() use
- wifi: ath11k: fix htt pktlog locking
- clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- !8537  scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- !8538  drm/amdgpu: Fix potential null pointer derefernce
- !8540  s390/dasd: protect device queue against concurrent access
- !8462  i2c: smbus: fix NULL function pointer dereference
- !8432  platform/x86: wmi: Fix opening of char device
- riscv: Check if the code to patch lies in the exit section
- mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- erspan: make sure erspan_base_hdr is present in skb-&gt;head
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- fs/9p: only translate RWX permissions for plain 9P2000
- netfilter: complete validation of user input
- netfilter: validate user input for expected length
- Revert "bpf, sockmap: Prevent lock inversion deadlock in map delete elem"
- bpf: Allow delete from sockmap/sockhash only if update is allowed
- bpf, sockmap: Prevent lock inversion deadlock in map delete elem
- geneve: fix header validation in geneve[6]_xmit_skb
- net: stmmac: Disable Tx queues when reconfiguring the interface
- xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- jfs: fix array-index-out-of-bounds in dbFindLeaf
- fs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev
- ARM: 9381/1: kasan: clear stale stack poison
- s390/dasd: protect device queue against concurrent access
- drm/amdgpu: Fix potential null pointer derefernce
- scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- gpiolib: cdev: fix uninitialised kfifo
- scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- i2c: smbus: fix NULL function pointer dereference
- platform/x86: wmi: Fix opening of char device
- ipvlan: add ipvlan_route_v6_outbound() helper
- nilfs2: fix underflow in second superblock position calculations
- RDMA: Verify port when creating flow rule
- IB/mlx4: Use port iterator and validation APIs
- ipv6: Fix infinite recursion in fib6_dump_done().
- bpf: Protect against int overflow for stack access size
- ipv4: check for NULL idev in ip_route_use_hint()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.80.0.160" date="1718798400">- !9093 v2  ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9031  bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- !9065  afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- !8933  Fix CVE-2023-52732
- !8927 [sync] PR-8222:  Fix CVE-2023-52672
- !9172 [sync] PR-7041:  netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
- !9171 [sync] PR-6994: v2  net/mlx5e: Prevent deadlock while disabling aRFS
- !8733  batman-adv: Avoid infinite loop trying to resize local TT
- !7374 [sync] PR-6879:  net/smc: Fix possible access to freed memory in link clear
- !9098  Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
- net/mlx5e: Prevent deadlock while disabling aRFS
- !9165  genirq: introduce handle_fasteoi_edge_irq flow handler
- genirq: introduce handle_fasteoi_edge_irq for phytium
- genirq: introduce handle_fasteoi_edge_irq flow handler
- !9139 v2  CVE-2024-36971
- !8495  rpmsg: virtio: Free driver_override when rpmsg_remove()
- !9127  hsr: Prevent use after free in prp_create_tagged_frame()
- !9075  Fix UAF problem of hpool
- !9132  mm: swap: fix race between free_swap_and_cache() and swapoff()
- !9130  ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- !9069  Bluetooth: RFCOMM: Fix not validating setsockopt user input
- !8970  mmc: mmc_spi: fix error handling in mmc_spi_probe()
- !8977 [sync] PR-8584:  virtio-blk: fix implicit overflow on virtio_max_dma_size
- !8701  wifi: cfg80211: check A-MSDU format more carefully
- net: fix kabi breakage in struct dst_ops
- net: fix __dst_negative_advice() race
- net: annotate data-races around sk-&gt;sk_dst_pending_confirm
- mm: swap: fix race between free_swap_and_cache() and swapoff()
- ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- hsr: Prevent use after free in prp_create_tagged_frame()
- !9002  scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- !9056  drm/panel: fix a possible null pointer dereference
- !9054  soc: fsl: qbman: Use raw spinlock for cgr_lock
- !8939  clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- !8952  ACPI: video: check for error while searching for backlight device parent
- !8986 [sync] PR-8639:  s390/qeth: Fix kernel panic after setting hsuid
- Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- !8714  Fix page corruption caused by racy check in __free_pages
- ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9080  Bluetooth: L2CAP: Fix not validating setsockopt user input
- Bluetooth: L2CAP: Fix not validating setsockopt user input
- mm/dynamic_hugetlb: use rcu lock to protect hpool
- mm/dynamic_hugetlb: simplify the refcount code
- !9072 [sync] PR-9015:  CVE-2024-36953
- !9071 [sync] PR-9014:  drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr()
- KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id
- drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- Bluetooth: RFCOMM: Fix not validating setsockopt user input
- afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- !8947 [sync] PR-6800:  block: fix overflow in blk_ioctl_discard()
- !9052  CVE-2024-35796
- drm/panel: fix a possible null pointer dereference
- soc: fsl: qbman: Use raw spinlock for cgr_lock
- !9021  wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- net: ll_temac: platform_get_resource replaced by wrong function
- !9048  IB/hfi1: Restore allocated resources on failed copyout
- IB/hfi1: Restore allocated resources on failed copyout
- !9028  tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- !8830  Fix CVE-2024-35951
- !9009  fix CVE-2024-35839
- !9008  tipc: fix a possible memleak in tipc_buf_append
- !8721  CVE-2024-35887
- !8876  drm/vmwgfx: Fix invalid reads in fence signaled events
- !8884  scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- !8922  hugetlbfs: fix hugetlbfs_statfs() locking
- bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- netfilter: bridge: replace physindev with physinif in nf_bridge_info
- netfilter: propagate net to nf_bridge_get_physindev
- netfilter: nfnetlink_log: use proper helper for fetching physinif
- !8662  usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group
- tipc: fix a possible memleak in tipc_buf_append
- !8617 [sync] PR-8472:  fix CVE-2024-27415
- !8983  fix CVE-2024-36905
- scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- s390/qeth: Fix kernel panic after setting hsuid
- net: relax socket state check at accept time.
- tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets
- virtio-blk: fix implicit overflow on virtio_max_dma_size
- mmc: mmc_spi: fix error handling in mmc_spi_probe()
- ACPI: video: check for error while searching for backlight device parent
- block: fix overflow in blk_ioctl_discard()
- clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- ceph: blocklist the kclient when receiving corrupted snap trace
- ceph: shut down access to inode when async create fails
- ceph: refactor remove_session_caps_cb
- ceph: fix auth cap handling logic in remove_session_caps_cb
- ceph: drop private list from remove_session_caps_cb
- pipe: wakeup wr_wait after setting max_usage
- fs/pipe: move check to pipe_has_watch_queue()
- hugetlbfs: fix hugetlbfs_statfs() locking
- scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- drm/vmwgfx: Fix invalid reads in fence signaled events
- drm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr()
- drm/panfrost: Fix the panfrost_mmu_map_fault_addr() error path
- batman-adv: Avoid infinite loop trying to resize local TT
- ax25: fix use-after-free bugs caused by ax25_ds_del_timer
- Fix page corruption caused by racy check in __free_pages
- wifi: cfg80211: check A-MSDU format more carefully
- usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group
- netfilter: br_netfilter: skip conntrack input hook for promisc packets
- netfilter: bridge: confirm multicast packets before passing them up the stack
- rpmsg: virtio: Free driver_override when rpmsg_remove()
- net/smc: Fix possible access to freed memory in link clear</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.80.0.161" date="1718884800">- Add the pub key in openEuler RPM-PGP certificate</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.81.0.162" date="1719403200">- !8104 [sync] PR-7886:  drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- !9443  net/mlx5: Discard command completions in internal error
- !9448  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9432  hid: cp2112: Fix duplicate workqueue initialization
- !9424  ASoC: SOF: Fix DSP oops stack dump output contents
- !9418 [sync] PR-6683: v2  CVE-2024-26921
- !9296  CVE-2021-47599
- !9403  Fix CVE-2024-31076
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- !9198  init/main.c: Fix potential static_command_line memory overflow
- hid: cp2112: Fix duplicate workqueue initialization
- ASoC: SOF: Fix DSP oops stack dump output contents
- !6742 [sync] PR-6654:  net/ipv6: avoid possible UAF in ip6_route_mpath_notify()
- sk_buff: Fix KABI break for the modification of struct sk_buff
- inet: inet_defrag: prevent sk release while still in use
- net: Fix KABI break for introducing is_skb_wmem()
- skb_expand_head() adjust skb-&gt;truesize incorrectly
- skbuff: introduce skb_expand_head()
- !9349  powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9396  RDMA/hns: Fix deadlock on SRQ async events.
- !9353 [sync] PR-9305:  CVE-2024-26661 following bugfix
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- !9359  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9379  RDMA/hns: Fix UAF for cq async event
- !9291  net: bridge: xmit: make sure we have at least eth header len bytes
- RDMA/hns: Fix deadlock on SRQ async events.
- !9049 [sync] PR-8774:  CVE-2024-36914
- !9263  ring-buffer: Fix a race between readers and resize checks
- RDMA/hns: Fix UAF for cq async event
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- Revert "drm/amd/display: Fix &amp;&amp; vs || typos"
- powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9272  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9274  wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- !9281  drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- !9279  net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- !9213 [sync] PR-9112:  Backport some optimizing patches for kunpeng920
- !9106  ksmbd: no response from compound read
- !9185  spi: Fix deadlock when adding SPI controllers on SPI buses
- net: bridge: xmit: make sure we have at least eth header len bytes
- drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- ring-buffer: Fix a race between readers and resize checks
- !9181  wifi: wilc1000: fix RCU usage in connect path
- !9214  drm/amd/display: Fix division by zero in setup_dsc_config
- !7541 [sync] PR-6801:  block: fix discard
- !9142 v2  CVE-2023-52810
- !8460 [sync] PR-8069:  CVE-2021-47427
- !9155  fix CVE-2023-52791
- !9169  UBIFS: fixes a series of issues that caused by power cut
- !9003  media: tc358743: register v4l2 async device only after successful setup
- !9088  fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Fix division by zero in setup_dsc_config
- arm64: syscall: unmask DAIF for tracing status
- arm64: Snapshot thread flags
- sched: Snapshot thread flags
- entry: Snapshot thread flags
- x86: Snapshot thread flags
- thread_info: Add helpers to snapshot thread flags
- irqchip/gic-v3: Use dsb(ishst) to order writes with ICC_SGI1R_EL1 accesses
- sched/fair: Optimize test_idle_cores() for !SMT
- init/main.c: Fix potential static_command_line memory overflow
- spi: fix kabi breakage in struct spi_controller
- spi: fix use-after-free of the add_lock mutex
- spi: Fix deadlock when adding SPI controllers on SPI buses
- wifi: wilc1000: fix RCU usage in connect path
- ubifs: dbg_orphan_check: Fix missed key type checking
- ubifs: Fix unattached inode when powercut happens in creating
- ubifs: Fix space leak when powercut happens in linking tmpfile
- ubifs: Move ui-&gt;data initialization after initializing security
- ubifs: Fix adding orphan entry twice for the same inode
- ubifs: Remove insert_dead_orphan from replaying orphan process
- ubifs: Don't add xattr inode into orphan area
- ubifs: Fix unattached xattr inode if powercut happens after deleting
- ubifs: Fix some kernel-doc comments
- ubifs: Fix spelling mistakes
- i2c: core: Fix atomic xfer check for non-preempt config
- i2c: core: Run atomic i2c xfer when !preemptible
- fs/jfs: Add check for negative db_l2nbperpage
- jfs: jfs_dmap: Validate db_l2nbperpage while mounting
- ksmbd: no response from compound read
- fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Skip on writeback when it's not applicable
- media: tc358743: register v4l2 async device only after successful setup
- scsi: iscsi: Fix iscsi_task use after free
- scsi: iscsi: Have abort handler get ref to conn
- drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- block: check io size before submit discard
- block: fix overflow in blk_ioctl_discard()
- net/ipv6: avoid possible UAF in ip6_route_mpath_notify()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.82.0.163" date="1719403201">- !9461 [sync] PR-5860:  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9197  scsi: core: Fix unremoved procfs host directory regression
- !9203  dyndbg: fix old BUG_ON in &gt;control parser
- !9195  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9200  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9189  clk: Fix clk_core_get NULL dereference
- !9187  net: phy: fix phy_get_internal_delay accessing an empty array
- !9460 v2  CVE-2024-27032
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- scsi: core: Fix unremoved procfs host directory regression
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.83.0.164" date="1720008000">- !9159  xfs: don't use current-&gt;journal_info
- !9659  fix uaf when proc_cpuset_show
- !9574 [sync] PR-8683: v4  Fix CVE-2024-35879
- !9531  CVE-2024-37356
- !9650  RDMA/hns: Modify the print level of CQE error
- !9495  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- RDMA/hns: Modify the print level of CQE error
- !9515  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9604 [sync] PR-9595:  drm/arm/malidp: fix a possible null pointer dereference
- !9603 [sync] PR-9593:  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9602 [sync] PR-9504:  um: Add winch to winch_handlers before registering winch IRQ
- !9601  CVE-2024-38597
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- um: Add winch to winch_handlers before registering winch IRQ
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9575 [sync] PR-9321:  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9586 [sync] PR-9284:  of: module: add buffer overflow check in of_modalias()
- !9589  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- of: module: add buffer overflow check in of_modalias()
- !9541  net/mlx5e: Avoid field-overflowing memcpy()
- !9480  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9579 [sync] PR-9558:  CVE-2024-39362
- !8565 [sync] PR-8240: v2  dmaengine: idxd: Fix oops during rmmod on single-CPU platforms
- !9545  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9576 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9384  serial: max3100: Update uart_driver_registered on driver removal
- !9564  fs/ntfs3: Check 'folio' pointer for NULL
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- drm/amd/display: Fix potential index out of bounds in color transformation function
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()
- !9484  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9529  media: lgdt3306a: Add a check against null-pointer-def
- fs/ntfs3: Check 'folio' pointer for NULL
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- !9375  ALSA: core: Fix NULL module pointer assignment at card init
- !9468  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9458  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- !9431  CVE-2022-48703
- !9364  fs/ntfs3: Use variable length array instead of fixed size
- media: lgdt3306a: Add a check against null-pointer-def
- !9411  kprobes: Fix possible use-after-free issue on kprobe registration
- !8743  ext4 bugfix from mainline
- !9498  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9397 [sync] PR-9350:  tracing: Fix permissions for the buffer_percent file
- !9334  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8712  ubifs: Set page uptodate in the correct place
- !9259  Fix CVE-2024-38588
- !9385  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9454  jffs2: prevent xattr node from overflowing the eraseblock
- !9328  CVE-2024-38596
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- kprobes: Fix possible use-after-free issue on kprobe registration
- tracing: Fix permissions for the buffer_percent file
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- af_unix: Fix data-races around sk-&gt;sk_shutdown.
- af_unix: Fix data races around sk-&gt;sk_shutdown.
- ftrace: Fix possible use-after-free issue in ftrace_location()
- ftrace: Fix possible warning on checking all pages used in ftrace_process_locs()
- ftrace: Store the order of pages allocated in ftrace_page
- xfs: don't use current-&gt;journal_info
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- ubifs: Set page uptodate in the correct place
- dmaengine: idxd: Fix oops during rmmod on single-CPU platforms</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.84.0.165" date="1720612800">- !9852  net/sched: act_skbmod: prevent kernel-infoleak
- !9854  nilfs2: fix use-after-free of timer for log writer thread
- !9855 [sync] PR-8096:  Fix CVE-2024-35988
- !9469 [sync] PR-8098:  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !9833  mmc: davinci: Don't strip remove function when driver is builtin
- !9847 [sync] PR-9500:  netfilter: nf_tables: flush pending destroy work before exit_net release
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- netfilter: nf_tables: flush pending destroy work before exit_net release
- mmc: davinci: Don't strip remove function when driver is builtin
- !9651  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9818  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9806  CVE-2024-36478
- !9773  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- null_blk: Move driver into its own directory
- !9794  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9790  clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- !9661 v3  Fix CVE-2024-38567
- !9552  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9767  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9769  iomap: Don't finish dio under irq when there exists pages
- !9774  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- !9733  drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9718  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9762  CVE-2024-26816
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9717  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- !9702  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9738  CVE-2024-38621
- !9673  ax25: Fix reference count leak issue of net_device
- !9734  net/9p: fix uninit-value in p9_client_rpc()
- !9740  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9739  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- media: stk1160: fix bounds checking in stk1160_copy_video()
- net/9p: fix uninit-value in p9_client_rpc()
- drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- !9722  ext4: delete redundant uptodate
- ext4: delete redundant uptodate check for buffer
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9641  CVE-2024-38582
- !9663  tls: fix missing memory barrier in tls_init
- !9656 v2  CVE-2024-38586
- !9685  greybus: lights: check return of get_channel_from_mode
- !9671  crypto: bcm - Fix pointer arithmetic
- !9635  fix CVE-2022-48721
- greybus: lights: check return of get_channel_from_mode
- ax25: Fix reference count leak issue of net_device
- crypto: bcm - Fix pointer arithmetic
- tls: fix missing memory barrier in tls_init
- wifi: carl9170: add a proper sanity check for endpoints
- USB: core: Add routines for endpoint checks in old drivers
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- net/smc: Fix slab-out-of-bounds issue in fallback
- net/smc: Only save the original clcsock callback functions
- net/smc: Avoid overwriting the copies of clcsock callback functions
- net/smc: Forward wakeup to smc socket waitqueue after fallback
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path</changelog>
</package>
<package pkgid="4387a91e666d99dc5db86f0188d2f167f8b21b5f7478b2e59df1671c76aaafac" name="kernel" arch="src">
  <version epoch="0" ver="5.10.0" rel="136.85.0.166.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.77.0.157" date="1716984000">- !8099  Fix CVE-2023-52854
- !8045  drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- !8148  pinctrl: single: fix potential NULL dereference
- !8157 [sync] PR-8017:  perf/core: Bail out early if the request AUX area is out of bound
- !8114 [sync] PR-8023:  fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !8093 [sync] PR-7980:  Fix CVE-2021-47455
- !8117 [sync] PR-8060:  soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- !7799  net-memcg: Fix scope of sockmem pressure indicators
- !8087 [sync] PR-8019:  pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8095 [sync] PR-7143:  media: usbtv: Remove useless locks in usbtv_video_free()
- !7134 [sync] PR-7092:  Squashfs: check the inode number is not the invalid value of zero
- perf/core: Bail out early if the request AUX area is out of bound
- !8132  scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- pinctrl: single: fix potential NULL dereference
- !8083 [sync] PR-6808:  CVE-2024-26923
- !8003 [sync] PR-7970:  fbmon: prevent division by zero in fb_videomode_from_videomode()
- scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- !6875 [sync] PR-6756:  vfio/fsl-mc: Block calling interrupt handler without trigger
- soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !7879 [sync] PR-7684:  dm snapshot: fix lockup in dm_exception_table_exit
- !8072 [sync] PR-8030:  netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- padata: Fix refcnt handling in padata_free_shell()
- padata: Convert from atomic_t to refcount_t on parallel_data-&gt;refcnt
- !7995  HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !8041  media: vidtv: mux: Add check and kfree for kstrdup
- media: usbtv: Remove useless locks in usbtv_video_free()
- ptp: fix code indentation issues
- ptp: Fix possible memory leak in ptp_clock_register()
- !7962  hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8020  media: bttv: fix use after free error due to btv-&gt;timeout timer
- af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc().
- af_unix: Fix garbage collector racing against connect()
- !8026 [sync] PR-7961:  net: atlantic: eliminate double free in error handling logic
- !7945  crypto: engine - fix crypto_queue backlog handling
- netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- !8034  clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- media: vidtv: mux: Add check and kfree for kstrdup
- clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- !8005 [sync] PR-7903:  virtio_ring : keep used_wrap_counter in
- net: atlantic: eliminate double free in error handling logic
- media: bttv: fix use after free error due to btv-&gt;timeout timer
- virtio_ring : keep used_wrap_counter in vq-&gt;last_used_idx
- fbmon: prevent division by zero in fb_videomode_from_videomode()
- HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !7954  media: vidtv: psi: Add check for kstrdup
- !7973 [sync] PR-7949:  drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- !7968 [sync] PR-7943: v2  netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7939 v2  pstore/platform: Add check for kstrdup
- drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7936 [sync] PR-7911:  ACPI: LPIT: Avoid u32 multiplication overflow
- !7850 [sync] PR-7576:  f2fs: compress: fix reserve_cblocks counting error when out of space
- !7862 [sync] PR-7757:  Fix CVE-2023-52656
- hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- media: vidtv: psi: Add check for kstrdup
- crypto: engine - fix crypto_queue backlog handling
- !7914 [sync] PR-7853:  net/mlx5e: fix a double-free in arfs_create_groups
- pstore/platform: Add check for kstrdup
- ACPI: LPIT: Avoid u32 multiplication overflow
- !7787 [sync] PR-7655: v3  KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7906 [sync] PR-7877: v4  eeprom: at24: fix memory corruption race condition
- net/mlx5e: fix a double-free in arfs_create_groups
- !7897  Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- eeprom: at24: fix memory corruption race condition
- !7796 [sync] PR-7743:  netrom: Fix data-races around sysctl_net_busy_read
- !7884 [sync] PR-7773:  Fix CVE-2023-52698
- Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- calipso: fix memory leak in netlbl_calipso_add_pass()
- netlabel: remove unused parameter in netlbl_netlink_auditinfo()
- net: netlabel: Fix kerneldoc warnings
- dm snapshot: fix lockup in dm_exception_table_exit
- !7859 [sync] PR-7846:  netrom: Fix a data-race around sysctl_netrom_transport_timeout
- io_uring: drop any code related to SCM_RIGHTS
- io_uring/unix: drop usage of io_uring socket
- netrom: Fix a data-race around sysctl_netrom_transport_timeout
- !7778 [sync] PR-7749: v2  wifi: iwlwifi: dbg-tlv: ensure NUL termination
- f2fs: compress: fix reserve_cblocks counting error when out of space
- !7829 [sync] PR-7779:  LoongArch: Define the __io_aw() hook as mmiowb()
- !7826 [sync] PR-7714:  CVE-2024-35936
- !7837 [sync] PR-7681:  xfs: three bug fix recently
- xfs: update dir3 leaf block metadata after swap
- xfs: ensure logflagsp is initialized in xfs_bmap_del_extent_real
- iomap: fix warning in xfs_iomap_write_delalloc_release()
- !7747  x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- !7819 [sync] PR-7734:  mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- LoongArch: Define the __io_aw() hook as mmiowb()
- btrfs: add missing mutex_unlock in btrfs_relocate_sys_chunks()
- btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks()
- mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- net-memcg: Fix scope of sockmem pressure indicators
- netrom: Fix data-races around sysctl_net_busy_read
- KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7768  net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: iwlwifi: dbg-tlv: ensure NUL termination
- !7711 [sync] PR-7579:  powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- !7755  wifi: ath11k: decrease MHI channel buffer length to 8KB
- net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: ath11k: decrease MHI channel buffer length to 8KB
- x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Squashfs: check the inode number is not the invalid value of zero
- vfio/fsl-mc: Block calling interrupt handler without trigger</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.78.0.158" date="1717588800">- !8594 [sync] PR-6990:  netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- !8591 [sync] PR-7174:  CVE-2022-48689
- !8595 [sync] PR-6939:  USB: core: Fix deadlock in usb_deauthorize_interface()
- !8554 [sync] PR-8395:  5.10: fix CVE-2024-35978
- !8364  perf: hisi: Fix use-after-free when register pmu fails
- !8606  smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- !7672  btrfs: send: handle path ref underflow in header iterate_inode_ref()
- !8597 [sync] PR-6393:  crypto: xilinx - call finalize with bh disabled
- !8514  net: ena: Fix incorrect descriptor free behavior
- !8563 [sync] PR-8110:  drm/client: Fully protect modes[
- smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- crypto: xilinx - call finalize with bh disabled
- USB: core: Fix deadlock in usb_deauthorize_interface()
- netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- tcp: TX zerocopy should not sense pfmemalloc status
- net: skbuff: update comment about pfmemalloc propagating
- net: introduce __skb_fill_page_desc_noacc
- tcp: factor out tcp_build_frag()
- !8505  CVE: CVE-2024-36015
- drm/client: Fully protect modes[] with dev-&gt;mode_config.mutex
- !8523  tty: vcc: Add check for kstrdup() in vcc_probe()
- !8487 [sync] PR-8397:  mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- !8486 [sync] PR-8373:  dma-direct: Leak pages on dma_set_decrypted() failure
- !8245 [sync] PR-7870:  CVE-2024-35995
- Bluetooth: Fix memory leak in hci_req_sync_complete()
- !8202  arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- !8408  pinctrl: core: delete incorrect free in pinctrl_enable()
- tty: vcc: Add check for kstrdup() in vcc_probe()
- net: ena: Fix incorrect descriptor free behavior
- !8457 [sync] PR-8416:  iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- !8501 [sync] PR-7889:  vt: fix unicode buffer corruption when deleting characters
- ppdev: Add an error check in register_device
- ppdev: Remove usage of the deprecated ida_simple_xx() API
- vt: fix unicode buffer corruption when deleting characters
- mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- dma-direct: Leak pages on dma_set_decrypted() failure
- !8429  drm/amdgpu: Fix even more out of bound writes from debugfs
- !8340  soc: qcom: llcc: Handle a second device without data corruption
- !8369  efi/capsule-loader: fix incorrect allocation size
- !8312 [sync] PR-8039: v2  dynamic_hugetlb: backport some bugfix
- !8451 [sync] PR-8342:  net/mlx5: Properly link new fs rules into the tree
- !8293  drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- net/mlx5: Properly link new fs rules into the tree
- !8179  jfs: fix array-index-out-of-bounds in diAlloc
- !8167 v2  mmc: sdio: fix possible resource leaks in some error paths
- !8346 [sync] PR-8248:  gfs2: ignore negated quota changes
- !8331 [sync] PR-8254:  sysv: don't call sb_bread() with pointers_lock held
- !8375 [sync] PR-8306:  mptcp: ensure tx skbs always have the MPTCP ext
- drm/amdgpu: Fix even more out of bound writes from debugfs
- !8391 [sync] PR-8109:  vhost-vdpa: fix use after free in vhost_vdpa_probe()
- pinctrl: core: delete incorrect free in pinctrl_enable()
- !8370  locking/ww_mutex/test: Fix potential workqueue corruption
- !8311  drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8334  wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- !8317  net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8235 [sync] PR-8054:  CVE-2023-52669
- !8380 [sync] PR-8212:  fix CVE-2024-35877
- vhost-vdpa: fix use after free in vhost_vdpa_probe()
- !8294  CVE-2023-52735
- x86/mm/pat: fix VM_PAT handling in COW mappings
- !8196  clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- mptcp: ensure tx skbs always have the MPTCP ext
- locking/ww_mutex/test: Fix potential workqueue corruption
- efi/capsule-loader: fix incorrect allocation size
- perf: hisi: Fix use-after-free when register pmu fails
- !7776 [sync] PR-7717:  CVE-2023-52655
- !8323 [sync] PR-8219:  tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8273  ALSA: hda: Do not unset preset when cleaning up codec
- !8269  drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- !8251 v2  CVE-2024-35956
- gfs2: ignore negated quota changes
- soc: qcom: llcc: Handle a second device without data corruption
- wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- sysv: don't call sb_bread() with pointers_lock held
- tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8277  usb: udc: remove warning when queue disabled ep
- net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8289 [sync] PR-8150:  mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !8265 [sync] PR-8228:  ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- mm/dynamic_hugetlb: refine error info in the destruction
- mm/dynamic_hugetlb: make free_huge_page_to_dhugetlb_pool irq safe
- mm/dynamic_hugetlb: check NULL pointer for early parameter
- mm/dynamic_hugetlb: add lru_add_drain_all() before migration
- mm/dynamic_hugetlb: add cond_resched() in hpool_merge_page()
- mm/dynamic_hugetlb: reduce the number of migration attempts
- mm/dpool: Use helper function to lock/unlock
- drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8231  CVE-2023-52804
- bpf, sockmap: Check for any of tcp_bpf_prots when cloning a listener
- bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself
- drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !7833 [sync] PR-7599:  irqchip/gic-v3-its: Prevent double free on error
- !8259 v5  can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- usb: udc: remove warning when queue disabled ep
- ALSA: hda: Do not unset preset when cleaning up codec
- drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- !7855  clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- btrfs: qgroup: fix qgroup prealloc rsv leak in subvolume operations
- btrfs: fix anon_dev leak in create_subvol()
- ACPI: CPPC: Fix access width used for PCC registers
- ACPI: CPPC: Fix bit_offset shift in MASK_VAL() macro
- ACPI: CPPC: Use access_width over bit_width for system memory accesses
- ACPI: CPPC: Fix up I/O port access in cpc_read()
- ACPI: CPPC: Implement support for SystemIO registers
- crypto: s390/aes - Fix buffer overread in CTR mode
- fs/jfs: Add validity check for db_maxag and db_agpref
- fs: jfs: fix shift-out-of-bounds in dbAllocAG
- !8224  ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- !8125 [sync] PR-8042:  xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- jfs: fix array-index-out-of-bounds in diAlloc
- mmc: sdio: fix possible resource leaks in some error paths
- xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- irqchip/gic-v3-its: Prevent double free on error
- usb: aqc111: check packet for fixup for true limit
- btrfs: send: handle path ref underflow in header iterate_inode_ref()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.79.0.159" date="1718193600">- !8950  aio: fix mremap after fork null-deref
- !8948  CVE-2022-48652
- !8866  ipv6: prevent NULL dereference in ip6_output()
- !8780  smb: client: fix UAF in smb2_reconnect_server()
- !8859  net/smc: avoid data corruption caused by decline
- !8722 v2  SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !8964  Fix CVE-2024-35915
- !8963  Fix CVE-2024-35915
- !8735  mptcp: ensure snd_nxt is properly initialized on connect
- !8761  tipc: fix UAF in error path
- !8741  octeontx2-af: avoid off-by-one read from userspace
- !8953  powerpc/powernv: Add a null pointer check in opal_event_init()
- !8685  mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- !8967  Fix CVE-2024-36949
- !8861  blk-iocost: do not WARN if iocg was already offlined
- !8841 v2  IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- !8945  usb: typec: ucsi: Limit read size on v1.2
- !8905  ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8709 [sync] PR-8046:  block: prevent division by zero in blk_rq_stat_sum()
- !8839  blk-iocost: avoid out of bounds shift
- !8857  PCI/PM: Drain runtime-idle callbacks before driver removal
- amd/amdkfd: sync all devices to wait all processes being evicted
- drm/amdkfd: Rework kfd_locked handling
- !8911  net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- !8915  gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- !8788 [sync] PR-8558:  xen-netfront: Add missing skb_mark_for_recycle
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- powerpc/powernv: Add a null pointer check in opal_event_init()
- aio: fix mremap after fork null-deref
- ice: Fix crash by keep old cfg when update TCs more than queues
- ice: ethtool: Prohibit improper channel config for DCB
- !8880  net: core: reject skb_copy(_expand) for fraglist GSO skbs
- usb: typec: ucsi: Limit read size on v1.2
- !8892  net: fix out-of-bounds access in ops_init
- !8810  net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8672  fix CVE-2024-36021 and CVE-2024-36900
- !8886  CVE-2024-36933
- gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8755  drm/amd/display: Avoid NULL dereference of timing generator
- !8754  pwm: Fix double shift bug
- !8850  ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- net: fix out-of-bounds access in ops_init
- !8665  phonet/pep: fix racy skb_queue_empty() use
- nsh: Restore skb-&gt;{protocol,data,mac_header} for outer header in nsh_gso_segment().
- net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment()
- net: core: reject skb_copy(_expand) for fraglist GSO skbs
- ipv6: prevent NULL dereference in ip6_output()
- blk-iocost: do not WARN if iocg was already offlined
- net/smc: avoid data corruption caused by decline
- PCI/PM: Drain runtime-idle callbacks before driver removal
- ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- !8687  tcp: properly terminate timers for kernel sockets
- !8630  erspan: make sure erspan_base_hdr is present in skb-&gt;head
- IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- blk-iocost: avoid out of bounds shift
- !7988 [sync] PR-7960:  ipv6: Fix infinite recursion in fib6_dump_done().
- !8388 [sync] PR-8300:  ipvlan: add ipvlan_route_v6_outbound() helper
- !8282 [sync] PR-8133:  fix CVE-2021-47265
- !7925 [sync] PR-7741:  ipv4: check for NULL idev in ip_route_use_hint()
- !8724  tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- !8480  scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- !8622  fs/9p: only translate RWX permissions for plain 9P2000
- net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8728  net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8790  Bluetooth: SCO: Fix not validating setsockopt user input
- !8680  rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- !8713 [sync] PR-8583:  mmc: sdhci-msm: pervent access to suspended controller
- !8670  CVE-2024-35854
- Bluetooth: SCO: Fix not validating setsockopt user input
- !8696  clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- !8653 v3  clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- xen-netfront: Add missing skb_mark_for_recycle
- !8571  jfs: fix two array-index-out-of-bounds issuse
- !8356  nilfs2: fix underflow in second superblock position calculations
- !8592  geneve: fix header validation in geneve[6
- !8531  gpiolib: cdev: fix uninitialised kfifo
- smb: client: fix UAF in smb2_reconnect_server()
- !8631 [sync] PR-8519:  mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- tipc: fix UAF in error path
- !8751  ubifs: Check @c-&gt;dirty_[n|p
- drm/amd/display: Avoid NULL dereference of timing generator
- pwm: Fix double shift bug
- !8633 [sync] PR-8425:  CVE-2023-52677
- ubifs: Check @c-&gt;dirty_[n|p]n_cnt and @c-&gt;nroot state under @c-&gt;lp_mutex
- octeontx2-af: avoid off-by-one read from userspace
- !8669  wifi: ath11k: fix dfs radar event locking
- !8619  CVE-2024-35896
- !8608  CVE-2024-35895
- mptcp: ensure snd_nxt is properly initialized on connect
- !8659  wifi: ath11k: fix htt pktlog locking
- !8587  fix CVE-2021-47558
- net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8569  fix CVE-2024-36906
- tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !7933  bpf: Protect against int overflow for stack access size
- !8627 [sync] PR-8561:  mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- !8625 [sync] PR-8497:  Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- mmc: sdhci-msm: pervent access to suspended controller
- !8572  xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- block: prevent division by zero in blk_rq_stat_sum()
- clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- tcp: properly terminate timers for kernel sockets
- mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- net: hns3: fix kernel crash when devlink reload during initialization
- net: hns3: release PTP resources if pf initialization failed
- net: hns3: fix kernel crash when devlink reload during vf initialization
- net: hns3: fix kernel crash when devlink reload during pf initialization
- mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash
- wifi: ath11k: fix dfs radar event locking
- phonet/pep: fix racy skb_queue_empty() use
- wifi: ath11k: fix htt pktlog locking
- clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- !8537  scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- !8538  drm/amdgpu: Fix potential null pointer derefernce
- !8540  s390/dasd: protect device queue against concurrent access
- !8462  i2c: smbus: fix NULL function pointer dereference
- !8432  platform/x86: wmi: Fix opening of char device
- riscv: Check if the code to patch lies in the exit section
- mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- erspan: make sure erspan_base_hdr is present in skb-&gt;head
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- fs/9p: only translate RWX permissions for plain 9P2000
- netfilter: complete validation of user input
- netfilter: validate user input for expected length
- Revert "bpf, sockmap: Prevent lock inversion deadlock in map delete elem"
- bpf: Allow delete from sockmap/sockhash only if update is allowed
- bpf, sockmap: Prevent lock inversion deadlock in map delete elem
- geneve: fix header validation in geneve[6]_xmit_skb
- net: stmmac: Disable Tx queues when reconfiguring the interface
- xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- jfs: fix array-index-out-of-bounds in dbFindLeaf
- fs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev
- ARM: 9381/1: kasan: clear stale stack poison
- s390/dasd: protect device queue against concurrent access
- drm/amdgpu: Fix potential null pointer derefernce
- scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- gpiolib: cdev: fix uninitialised kfifo
- scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- i2c: smbus: fix NULL function pointer dereference
- platform/x86: wmi: Fix opening of char device
- ipvlan: add ipvlan_route_v6_outbound() helper
- nilfs2: fix underflow in second superblock position calculations
- RDMA: Verify port when creating flow rule
- IB/mlx4: Use port iterator and validation APIs
- ipv6: Fix infinite recursion in fib6_dump_done().
- bpf: Protect against int overflow for stack access size
- ipv4: check for NULL idev in ip_route_use_hint()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.80.0.160" date="1718798400">- !9093 v2  ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9031  bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- !9065  afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- !8933  Fix CVE-2023-52732
- !8927 [sync] PR-8222:  Fix CVE-2023-52672
- !9172 [sync] PR-7041:  netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
- !9171 [sync] PR-6994: v2  net/mlx5e: Prevent deadlock while disabling aRFS
- !8733  batman-adv: Avoid infinite loop trying to resize local TT
- !7374 [sync] PR-6879:  net/smc: Fix possible access to freed memory in link clear
- !9098  Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
- net/mlx5e: Prevent deadlock while disabling aRFS
- !9165  genirq: introduce handle_fasteoi_edge_irq flow handler
- genirq: introduce handle_fasteoi_edge_irq for phytium
- genirq: introduce handle_fasteoi_edge_irq flow handler
- !9139 v2  CVE-2024-36971
- !8495  rpmsg: virtio: Free driver_override when rpmsg_remove()
- !9127  hsr: Prevent use after free in prp_create_tagged_frame()
- !9075  Fix UAF problem of hpool
- !9132  mm: swap: fix race between free_swap_and_cache() and swapoff()
- !9130  ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- !9069  Bluetooth: RFCOMM: Fix not validating setsockopt user input
- !8970  mmc: mmc_spi: fix error handling in mmc_spi_probe()
- !8977 [sync] PR-8584:  virtio-blk: fix implicit overflow on virtio_max_dma_size
- !8701  wifi: cfg80211: check A-MSDU format more carefully
- net: fix kabi breakage in struct dst_ops
- net: fix __dst_negative_advice() race
- net: annotate data-races around sk-&gt;sk_dst_pending_confirm
- mm: swap: fix race between free_swap_and_cache() and swapoff()
- ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- hsr: Prevent use after free in prp_create_tagged_frame()
- !9002  scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- !9056  drm/panel: fix a possible null pointer dereference
- !9054  soc: fsl: qbman: Use raw spinlock for cgr_lock
- !8939  clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- !8952  ACPI: video: check for error while searching for backlight device parent
- !8986 [sync] PR-8639:  s390/qeth: Fix kernel panic after setting hsuid
- Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- !8714  Fix page corruption caused by racy check in __free_pages
- ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9080  Bluetooth: L2CAP: Fix not validating setsockopt user input
- Bluetooth: L2CAP: Fix not validating setsockopt user input
- mm/dynamic_hugetlb: use rcu lock to protect hpool
- mm/dynamic_hugetlb: simplify the refcount code
- !9072 [sync] PR-9015:  CVE-2024-36953
- !9071 [sync] PR-9014:  drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr()
- KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id
- drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- Bluetooth: RFCOMM: Fix not validating setsockopt user input
- afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- !8947 [sync] PR-6800:  block: fix overflow in blk_ioctl_discard()
- !9052  CVE-2024-35796
- drm/panel: fix a possible null pointer dereference
- soc: fsl: qbman: Use raw spinlock for cgr_lock
- !9021  wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- net: ll_temac: platform_get_resource replaced by wrong function
- !9048  IB/hfi1: Restore allocated resources on failed copyout
- IB/hfi1: Restore allocated resources on failed copyout
- !9028  tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- !8830  Fix CVE-2024-35951
- !9009  fix CVE-2024-35839
- !9008  tipc: fix a possible memleak in tipc_buf_append
- !8721  CVE-2024-35887
- !8876  drm/vmwgfx: Fix invalid reads in fence signaled events
- !8884  scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- !8922  hugetlbfs: fix hugetlbfs_statfs() locking
- bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- netfilter: bridge: replace physindev with physinif in nf_bridge_info
- netfilter: propagate net to nf_bridge_get_physindev
- netfilter: nfnetlink_log: use proper helper for fetching physinif
- !8662  usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group
- tipc: fix a possible memleak in tipc_buf_append
- !8617 [sync] PR-8472:  fix CVE-2024-27415
- !8983  fix CVE-2024-36905
- scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- s390/qeth: Fix kernel panic after setting hsuid
- net: relax socket state check at accept time.
- tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets
- virtio-blk: fix implicit overflow on virtio_max_dma_size
- mmc: mmc_spi: fix error handling in mmc_spi_probe()
- ACPI: video: check for error while searching for backlight device parent
- block: fix overflow in blk_ioctl_discard()
- clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- ceph: blocklist the kclient when receiving corrupted snap trace
- ceph: shut down access to inode when async create fails
- ceph: refactor remove_session_caps_cb
- ceph: fix auth cap handling logic in remove_session_caps_cb
- ceph: drop private list from remove_session_caps_cb
- pipe: wakeup wr_wait after setting max_usage
- fs/pipe: move check to pipe_has_watch_queue()
- hugetlbfs: fix hugetlbfs_statfs() locking
- scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- drm/vmwgfx: Fix invalid reads in fence signaled events
- drm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr()
- drm/panfrost: Fix the panfrost_mmu_map_fault_addr() error path
- batman-adv: Avoid infinite loop trying to resize local TT
- ax25: fix use-after-free bugs caused by ax25_ds_del_timer
- Fix page corruption caused by racy check in __free_pages
- wifi: cfg80211: check A-MSDU format more carefully
- usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group
- netfilter: br_netfilter: skip conntrack input hook for promisc packets
- netfilter: bridge: confirm multicast packets before passing them up the stack
- rpmsg: virtio: Free driver_override when rpmsg_remove()
- net/smc: Fix possible access to freed memory in link clear</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.80.0.161" date="1718884800">- Add the pub key in openEuler RPM-PGP certificate</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.81.0.162" date="1719403200">- !8104 [sync] PR-7886:  drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- !9443  net/mlx5: Discard command completions in internal error
- !9448  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9432  hid: cp2112: Fix duplicate workqueue initialization
- !9424  ASoC: SOF: Fix DSP oops stack dump output contents
- !9418 [sync] PR-6683: v2  CVE-2024-26921
- !9296  CVE-2021-47599
- !9403  Fix CVE-2024-31076
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- !9198  init/main.c: Fix potential static_command_line memory overflow
- hid: cp2112: Fix duplicate workqueue initialization
- ASoC: SOF: Fix DSP oops stack dump output contents
- !6742 [sync] PR-6654:  net/ipv6: avoid possible UAF in ip6_route_mpath_notify()
- sk_buff: Fix KABI break for the modification of struct sk_buff
- inet: inet_defrag: prevent sk release while still in use
- net: Fix KABI break for introducing is_skb_wmem()
- skb_expand_head() adjust skb-&gt;truesize incorrectly
- skbuff: introduce skb_expand_head()
- !9349  powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9396  RDMA/hns: Fix deadlock on SRQ async events.
- !9353 [sync] PR-9305:  CVE-2024-26661 following bugfix
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- !9359  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9379  RDMA/hns: Fix UAF for cq async event
- !9291  net: bridge: xmit: make sure we have at least eth header len bytes
- RDMA/hns: Fix deadlock on SRQ async events.
- !9049 [sync] PR-8774:  CVE-2024-36914
- !9263  ring-buffer: Fix a race between readers and resize checks
- RDMA/hns: Fix UAF for cq async event
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- Revert "drm/amd/display: Fix &amp;&amp; vs || typos"
- powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9272  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9274  wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- !9281  drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- !9279  net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- !9213 [sync] PR-9112:  Backport some optimizing patches for kunpeng920
- !9106  ksmbd: no response from compound read
- !9185  spi: Fix deadlock when adding SPI controllers on SPI buses
- net: bridge: xmit: make sure we have at least eth header len bytes
- drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- ring-buffer: Fix a race between readers and resize checks
- !9181  wifi: wilc1000: fix RCU usage in connect path
- !9214  drm/amd/display: Fix division by zero in setup_dsc_config
- !7541 [sync] PR-6801:  block: fix discard
- !9142 v2  CVE-2023-52810
- !8460 [sync] PR-8069:  CVE-2021-47427
- !9155  fix CVE-2023-52791
- !9169  UBIFS: fixes a series of issues that caused by power cut
- !9003  media: tc358743: register v4l2 async device only after successful setup
- !9088  fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Fix division by zero in setup_dsc_config
- arm64: syscall: unmask DAIF for tracing status
- arm64: Snapshot thread flags
- sched: Snapshot thread flags
- entry: Snapshot thread flags
- x86: Snapshot thread flags
- thread_info: Add helpers to snapshot thread flags
- irqchip/gic-v3: Use dsb(ishst) to order writes with ICC_SGI1R_EL1 accesses
- sched/fair: Optimize test_idle_cores() for !SMT
- init/main.c: Fix potential static_command_line memory overflow
- spi: fix kabi breakage in struct spi_controller
- spi: fix use-after-free of the add_lock mutex
- spi: Fix deadlock when adding SPI controllers on SPI buses
- wifi: wilc1000: fix RCU usage in connect path
- ubifs: dbg_orphan_check: Fix missed key type checking
- ubifs: Fix unattached inode when powercut happens in creating
- ubifs: Fix space leak when powercut happens in linking tmpfile
- ubifs: Move ui-&gt;data initialization after initializing security
- ubifs: Fix adding orphan entry twice for the same inode
- ubifs: Remove insert_dead_orphan from replaying orphan process
- ubifs: Don't add xattr inode into orphan area
- ubifs: Fix unattached xattr inode if powercut happens after deleting
- ubifs: Fix some kernel-doc comments
- ubifs: Fix spelling mistakes
- i2c: core: Fix atomic xfer check for non-preempt config
- i2c: core: Run atomic i2c xfer when !preemptible
- fs/jfs: Add check for negative db_l2nbperpage
- jfs: jfs_dmap: Validate db_l2nbperpage while mounting
- ksmbd: no response from compound read
- fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Skip on writeback when it's not applicable
- media: tc358743: register v4l2 async device only after successful setup
- scsi: iscsi: Fix iscsi_task use after free
- scsi: iscsi: Have abort handler get ref to conn
- drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- block: check io size before submit discard
- block: fix overflow in blk_ioctl_discard()
- net/ipv6: avoid possible UAF in ip6_route_mpath_notify()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.82.0.163" date="1719403201">- !9461 [sync] PR-5860:  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9197  scsi: core: Fix unremoved procfs host directory regression
- !9203  dyndbg: fix old BUG_ON in &gt;control parser
- !9195  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9200  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9189  clk: Fix clk_core_get NULL dereference
- !9187  net: phy: fix phy_get_internal_delay accessing an empty array
- !9460 v2  CVE-2024-27032
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- scsi: core: Fix unremoved procfs host directory regression
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.83.0.164" date="1720008000">- !9159  xfs: don't use current-&gt;journal_info
- !9659  fix uaf when proc_cpuset_show
- !9574 [sync] PR-8683: v4  Fix CVE-2024-35879
- !9531  CVE-2024-37356
- !9650  RDMA/hns: Modify the print level of CQE error
- !9495  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- RDMA/hns: Modify the print level of CQE error
- !9515  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9604 [sync] PR-9595:  drm/arm/malidp: fix a possible null pointer dereference
- !9603 [sync] PR-9593:  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9602 [sync] PR-9504:  um: Add winch to winch_handlers before registering winch IRQ
- !9601  CVE-2024-38597
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- um: Add winch to winch_handlers before registering winch IRQ
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9575 [sync] PR-9321:  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9586 [sync] PR-9284:  of: module: add buffer overflow check in of_modalias()
- !9589  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- of: module: add buffer overflow check in of_modalias()
- !9541  net/mlx5e: Avoid field-overflowing memcpy()
- !9480  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9579 [sync] PR-9558:  CVE-2024-39362
- !8565 [sync] PR-8240: v2  dmaengine: idxd: Fix oops during rmmod on single-CPU platforms
- !9545  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9576 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9384  serial: max3100: Update uart_driver_registered on driver removal
- !9564  fs/ntfs3: Check 'folio' pointer for NULL
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- drm/amd/display: Fix potential index out of bounds in color transformation function
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()
- !9484  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9529  media: lgdt3306a: Add a check against null-pointer-def
- fs/ntfs3: Check 'folio' pointer for NULL
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- !9375  ALSA: core: Fix NULL module pointer assignment at card init
- !9468  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9458  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- !9431  CVE-2022-48703
- !9364  fs/ntfs3: Use variable length array instead of fixed size
- media: lgdt3306a: Add a check against null-pointer-def
- !9411  kprobes: Fix possible use-after-free issue on kprobe registration
- !8743  ext4 bugfix from mainline
- !9498  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9397 [sync] PR-9350:  tracing: Fix permissions for the buffer_percent file
- !9334  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8712  ubifs: Set page uptodate in the correct place
- !9259  Fix CVE-2024-38588
- !9385  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9454  jffs2: prevent xattr node from overflowing the eraseblock
- !9328  CVE-2024-38596
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- kprobes: Fix possible use-after-free issue on kprobe registration
- tracing: Fix permissions for the buffer_percent file
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- af_unix: Fix data-races around sk-&gt;sk_shutdown.
- af_unix: Fix data races around sk-&gt;sk_shutdown.
- ftrace: Fix possible use-after-free issue in ftrace_location()
- ftrace: Fix possible warning on checking all pages used in ftrace_process_locs()
- ftrace: Store the order of pages allocated in ftrace_page
- xfs: don't use current-&gt;journal_info
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- ubifs: Set page uptodate in the correct place
- dmaengine: idxd: Fix oops during rmmod on single-CPU platforms</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.84.0.165" date="1720612800">- !9852  net/sched: act_skbmod: prevent kernel-infoleak
- !9854  nilfs2: fix use-after-free of timer for log writer thread
- !9855 [sync] PR-8096:  Fix CVE-2024-35988
- !9469 [sync] PR-8098:  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !9833  mmc: davinci: Don't strip remove function when driver is builtin
- !9847 [sync] PR-9500:  netfilter: nf_tables: flush pending destroy work before exit_net release
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- netfilter: nf_tables: flush pending destroy work before exit_net release
- mmc: davinci: Don't strip remove function when driver is builtin
- !9651  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9818  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9806  CVE-2024-36478
- !9773  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- null_blk: Move driver into its own directory
- !9794  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9790  clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- !9661 v3  Fix CVE-2024-38567
- !9552  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9767  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9769  iomap: Don't finish dio under irq when there exists pages
- !9774  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- !9733  drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9718  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9762  CVE-2024-26816
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9717  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- !9702  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9738  CVE-2024-38621
- !9673  ax25: Fix reference count leak issue of net_device
- !9734  net/9p: fix uninit-value in p9_client_rpc()
- !9740  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9739  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- media: stk1160: fix bounds checking in stk1160_copy_video()
- net/9p: fix uninit-value in p9_client_rpc()
- drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- !9722  ext4: delete redundant uptodate
- ext4: delete redundant uptodate check for buffer
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9641  CVE-2024-38582
- !9663  tls: fix missing memory barrier in tls_init
- !9656 v2  CVE-2024-38586
- !9685  greybus: lights: check return of get_channel_from_mode
- !9671  crypto: bcm - Fix pointer arithmetic
- !9635  fix CVE-2022-48721
- greybus: lights: check return of get_channel_from_mode
- ax25: Fix reference count leak issue of net_device
- crypto: bcm - Fix pointer arithmetic
- tls: fix missing memory barrier in tls_init
- wifi: carl9170: add a proper sanity check for endpoints
- USB: core: Add routines for endpoint checks in old drivers
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- net/smc: Fix slab-out-of-bounds issue in fallback
- net/smc: Only save the original clcsock callback functions
- net/smc: Avoid overwriting the copies of clcsock callback functions
- net/smc: Forward wakeup to smc socket waitqueue after fallback
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.85.0.166" date="1721217600">- !10068 [sync] PR-9984:  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !10032  ipv6: prevent possible NULL dereference in rt6_probe()
- !10063  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9991  netpoll: Fix race condition in netpoll_owner_active
- !10043  lib/generic-radix-tree.c: Don't overflow in peek()
- !9951  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9981  CVE-2024-40972
- !9995  Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- !9846 v2  CVE-2024-38598
- !9907  sock_map: avoid race between sock_map_close and sk_psock_put
- !9927  ocfs2: fix races between hole punching and AIO+DIO
- !9912  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9947  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9969 v2  netfilter: nft_set_pipapo: do not free live element
- !9980  Fix CVE-2023-52781
- !9954  drm/komeda: check for error-valued pointer
- !9923  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- netpoll: Fix race condition in netpoll_owner_active
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- ext4: remove duplicate definition of ext4_xattr_ibody_inline_set()
- usb: config: fix iteration issue in 'usb_get_bos_descriptor()'
- USB: core: Change configuration warnings to notices
- netfilter: nft_set_pipapo: do not free live element
- !9869  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9906  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9894  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9828  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9826  smb: client: fix potential deadlock when releasing mids
- !9890  ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9822 [sync] PR-9712:  fix CVE-2024-38540
- !9823 [sync] PR-9711:  fix CVE-2024-38615
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9840  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9873  CVE-2024-38570
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9636  ice: Do not use WQ_MEM_RECLAIM flag for workqueue
- !9747  CVE-2024-39469
- !9844  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- ice: Do not use WQ_MEM_RECLAIM flag for workqueue</changelog>
</package>
<package pkgid="3bc64cde55e16b9f7372be42baf5e92f48a195bee6dd2a15a60e7542670fcb9c" name="kernel" arch="src">
  <version epoch="0" ver="5.10.0" rel="136.86.0.167.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.78.0.158" date="1717588800">- !8594 [sync] PR-6990:  netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- !8591 [sync] PR-7174:  CVE-2022-48689
- !8595 [sync] PR-6939:  USB: core: Fix deadlock in usb_deauthorize_interface()
- !8554 [sync] PR-8395:  5.10: fix CVE-2024-35978
- !8364  perf: hisi: Fix use-after-free when register pmu fails
- !8606  smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- !7672  btrfs: send: handle path ref underflow in header iterate_inode_ref()
- !8597 [sync] PR-6393:  crypto: xilinx - call finalize with bh disabled
- !8514  net: ena: Fix incorrect descriptor free behavior
- !8563 [sync] PR-8110:  drm/client: Fully protect modes[
- smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- crypto: xilinx - call finalize with bh disabled
- USB: core: Fix deadlock in usb_deauthorize_interface()
- netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- tcp: TX zerocopy should not sense pfmemalloc status
- net: skbuff: update comment about pfmemalloc propagating
- net: introduce __skb_fill_page_desc_noacc
- tcp: factor out tcp_build_frag()
- !8505  CVE: CVE-2024-36015
- drm/client: Fully protect modes[] with dev-&gt;mode_config.mutex
- !8523  tty: vcc: Add check for kstrdup() in vcc_probe()
- !8487 [sync] PR-8397:  mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- !8486 [sync] PR-8373:  dma-direct: Leak pages on dma_set_decrypted() failure
- !8245 [sync] PR-7870:  CVE-2024-35995
- Bluetooth: Fix memory leak in hci_req_sync_complete()
- !8202  arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- !8408  pinctrl: core: delete incorrect free in pinctrl_enable()
- tty: vcc: Add check for kstrdup() in vcc_probe()
- net: ena: Fix incorrect descriptor free behavior
- !8457 [sync] PR-8416:  iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- !8501 [sync] PR-7889:  vt: fix unicode buffer corruption when deleting characters
- ppdev: Add an error check in register_device
- ppdev: Remove usage of the deprecated ida_simple_xx() API
- vt: fix unicode buffer corruption when deleting characters
- mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- dma-direct: Leak pages on dma_set_decrypted() failure
- !8429  drm/amdgpu: Fix even more out of bound writes from debugfs
- !8340  soc: qcom: llcc: Handle a second device without data corruption
- !8369  efi/capsule-loader: fix incorrect allocation size
- !8312 [sync] PR-8039: v2  dynamic_hugetlb: backport some bugfix
- !8451 [sync] PR-8342:  net/mlx5: Properly link new fs rules into the tree
- !8293  drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- net/mlx5: Properly link new fs rules into the tree
- !8179  jfs: fix array-index-out-of-bounds in diAlloc
- !8167 v2  mmc: sdio: fix possible resource leaks in some error paths
- !8346 [sync] PR-8248:  gfs2: ignore negated quota changes
- !8331 [sync] PR-8254:  sysv: don't call sb_bread() with pointers_lock held
- !8375 [sync] PR-8306:  mptcp: ensure tx skbs always have the MPTCP ext
- drm/amdgpu: Fix even more out of bound writes from debugfs
- !8391 [sync] PR-8109:  vhost-vdpa: fix use after free in vhost_vdpa_probe()
- pinctrl: core: delete incorrect free in pinctrl_enable()
- !8370  locking/ww_mutex/test: Fix potential workqueue corruption
- !8311  drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8334  wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- !8317  net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8235 [sync] PR-8054:  CVE-2023-52669
- !8380 [sync] PR-8212:  fix CVE-2024-35877
- vhost-vdpa: fix use after free in vhost_vdpa_probe()
- !8294  CVE-2023-52735
- x86/mm/pat: fix VM_PAT handling in COW mappings
- !8196  clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- mptcp: ensure tx skbs always have the MPTCP ext
- locking/ww_mutex/test: Fix potential workqueue corruption
- efi/capsule-loader: fix incorrect allocation size
- perf: hisi: Fix use-after-free when register pmu fails
- !7776 [sync] PR-7717:  CVE-2023-52655
- !8323 [sync] PR-8219:  tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8273  ALSA: hda: Do not unset preset when cleaning up codec
- !8269  drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- !8251 v2  CVE-2024-35956
- gfs2: ignore negated quota changes
- soc: qcom: llcc: Handle a second device without data corruption
- wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- sysv: don't call sb_bread() with pointers_lock held
- tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8277  usb: udc: remove warning when queue disabled ep
- net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8289 [sync] PR-8150:  mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !8265 [sync] PR-8228:  ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- mm/dynamic_hugetlb: refine error info in the destruction
- mm/dynamic_hugetlb: make free_huge_page_to_dhugetlb_pool irq safe
- mm/dynamic_hugetlb: check NULL pointer for early parameter
- mm/dynamic_hugetlb: add lru_add_drain_all() before migration
- mm/dynamic_hugetlb: add cond_resched() in hpool_merge_page()
- mm/dynamic_hugetlb: reduce the number of migration attempts
- mm/dpool: Use helper function to lock/unlock
- drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8231  CVE-2023-52804
- bpf, sockmap: Check for any of tcp_bpf_prots when cloning a listener
- bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself
- drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !7833 [sync] PR-7599:  irqchip/gic-v3-its: Prevent double free on error
- !8259 v5  can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- usb: udc: remove warning when queue disabled ep
- ALSA: hda: Do not unset preset when cleaning up codec
- drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- !7855  clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- btrfs: qgroup: fix qgroup prealloc rsv leak in subvolume operations
- btrfs: fix anon_dev leak in create_subvol()
- ACPI: CPPC: Fix access width used for PCC registers
- ACPI: CPPC: Fix bit_offset shift in MASK_VAL() macro
- ACPI: CPPC: Use access_width over bit_width for system memory accesses
- ACPI: CPPC: Fix up I/O port access in cpc_read()
- ACPI: CPPC: Implement support for SystemIO registers
- crypto: s390/aes - Fix buffer overread in CTR mode
- fs/jfs: Add validity check for db_maxag and db_agpref
- fs: jfs: fix shift-out-of-bounds in dbAllocAG
- !8224  ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- !8125 [sync] PR-8042:  xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- jfs: fix array-index-out-of-bounds in diAlloc
- mmc: sdio: fix possible resource leaks in some error paths
- xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- irqchip/gic-v3-its: Prevent double free on error
- usb: aqc111: check packet for fixup for true limit
- btrfs: send: handle path ref underflow in header iterate_inode_ref()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.79.0.159" date="1718193600">- !8950  aio: fix mremap after fork null-deref
- !8948  CVE-2022-48652
- !8866  ipv6: prevent NULL dereference in ip6_output()
- !8780  smb: client: fix UAF in smb2_reconnect_server()
- !8859  net/smc: avoid data corruption caused by decline
- !8722 v2  SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !8964  Fix CVE-2024-35915
- !8963  Fix CVE-2024-35915
- !8735  mptcp: ensure snd_nxt is properly initialized on connect
- !8761  tipc: fix UAF in error path
- !8741  octeontx2-af: avoid off-by-one read from userspace
- !8953  powerpc/powernv: Add a null pointer check in opal_event_init()
- !8685  mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- !8967  Fix CVE-2024-36949
- !8861  blk-iocost: do not WARN if iocg was already offlined
- !8841 v2  IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- !8945  usb: typec: ucsi: Limit read size on v1.2
- !8905  ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8709 [sync] PR-8046:  block: prevent division by zero in blk_rq_stat_sum()
- !8839  blk-iocost: avoid out of bounds shift
- !8857  PCI/PM: Drain runtime-idle callbacks before driver removal
- amd/amdkfd: sync all devices to wait all processes being evicted
- drm/amdkfd: Rework kfd_locked handling
- !8911  net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- !8915  gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- !8788 [sync] PR-8558:  xen-netfront: Add missing skb_mark_for_recycle
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- powerpc/powernv: Add a null pointer check in opal_event_init()
- aio: fix mremap after fork null-deref
- ice: Fix crash by keep old cfg when update TCs more than queues
- ice: ethtool: Prohibit improper channel config for DCB
- !8880  net: core: reject skb_copy(_expand) for fraglist GSO skbs
- usb: typec: ucsi: Limit read size on v1.2
- !8892  net: fix out-of-bounds access in ops_init
- !8810  net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8672  fix CVE-2024-36021 and CVE-2024-36900
- !8886  CVE-2024-36933
- gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8755  drm/amd/display: Avoid NULL dereference of timing generator
- !8754  pwm: Fix double shift bug
- !8850  ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- net: fix out-of-bounds access in ops_init
- !8665  phonet/pep: fix racy skb_queue_empty() use
- nsh: Restore skb-&gt;{protocol,data,mac_header} for outer header in nsh_gso_segment().
- net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment()
- net: core: reject skb_copy(_expand) for fraglist GSO skbs
- ipv6: prevent NULL dereference in ip6_output()
- blk-iocost: do not WARN if iocg was already offlined
- net/smc: avoid data corruption caused by decline
- PCI/PM: Drain runtime-idle callbacks before driver removal
- ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- !8687  tcp: properly terminate timers for kernel sockets
- !8630  erspan: make sure erspan_base_hdr is present in skb-&gt;head
- IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- blk-iocost: avoid out of bounds shift
- !7988 [sync] PR-7960:  ipv6: Fix infinite recursion in fib6_dump_done().
- !8388 [sync] PR-8300:  ipvlan: add ipvlan_route_v6_outbound() helper
- !8282 [sync] PR-8133:  fix CVE-2021-47265
- !7925 [sync] PR-7741:  ipv4: check for NULL idev in ip_route_use_hint()
- !8724  tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- !8480  scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- !8622  fs/9p: only translate RWX permissions for plain 9P2000
- net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8728  net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8790  Bluetooth: SCO: Fix not validating setsockopt user input
- !8680  rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- !8713 [sync] PR-8583:  mmc: sdhci-msm: pervent access to suspended controller
- !8670  CVE-2024-35854
- Bluetooth: SCO: Fix not validating setsockopt user input
- !8696  clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- !8653 v3  clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- xen-netfront: Add missing skb_mark_for_recycle
- !8571  jfs: fix two array-index-out-of-bounds issuse
- !8356  nilfs2: fix underflow in second superblock position calculations
- !8592  geneve: fix header validation in geneve[6
- !8531  gpiolib: cdev: fix uninitialised kfifo
- smb: client: fix UAF in smb2_reconnect_server()
- !8631 [sync] PR-8519:  mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- tipc: fix UAF in error path
- !8751  ubifs: Check @c-&gt;dirty_[n|p
- drm/amd/display: Avoid NULL dereference of timing generator
- pwm: Fix double shift bug
- !8633 [sync] PR-8425:  CVE-2023-52677
- ubifs: Check @c-&gt;dirty_[n|p]n_cnt and @c-&gt;nroot state under @c-&gt;lp_mutex
- octeontx2-af: avoid off-by-one read from userspace
- !8669  wifi: ath11k: fix dfs radar event locking
- !8619  CVE-2024-35896
- !8608  CVE-2024-35895
- mptcp: ensure snd_nxt is properly initialized on connect
- !8659  wifi: ath11k: fix htt pktlog locking
- !8587  fix CVE-2021-47558
- net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8569  fix CVE-2024-36906
- tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !7933  bpf: Protect against int overflow for stack access size
- !8627 [sync] PR-8561:  mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- !8625 [sync] PR-8497:  Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- mmc: sdhci-msm: pervent access to suspended controller
- !8572  xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- block: prevent division by zero in blk_rq_stat_sum()
- clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- tcp: properly terminate timers for kernel sockets
- mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- net: hns3: fix kernel crash when devlink reload during initialization
- net: hns3: release PTP resources if pf initialization failed
- net: hns3: fix kernel crash when devlink reload during vf initialization
- net: hns3: fix kernel crash when devlink reload during pf initialization
- mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash
- wifi: ath11k: fix dfs radar event locking
- phonet/pep: fix racy skb_queue_empty() use
- wifi: ath11k: fix htt pktlog locking
- clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- !8537  scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- !8538  drm/amdgpu: Fix potential null pointer derefernce
- !8540  s390/dasd: protect device queue against concurrent access
- !8462  i2c: smbus: fix NULL function pointer dereference
- !8432  platform/x86: wmi: Fix opening of char device
- riscv: Check if the code to patch lies in the exit section
- mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- erspan: make sure erspan_base_hdr is present in skb-&gt;head
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- fs/9p: only translate RWX permissions for plain 9P2000
- netfilter: complete validation of user input
- netfilter: validate user input for expected length
- Revert "bpf, sockmap: Prevent lock inversion deadlock in map delete elem"
- bpf: Allow delete from sockmap/sockhash only if update is allowed
- bpf, sockmap: Prevent lock inversion deadlock in map delete elem
- geneve: fix header validation in geneve[6]_xmit_skb
- net: stmmac: Disable Tx queues when reconfiguring the interface
- xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- jfs: fix array-index-out-of-bounds in dbFindLeaf
- fs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev
- ARM: 9381/1: kasan: clear stale stack poison
- s390/dasd: protect device queue against concurrent access
- drm/amdgpu: Fix potential null pointer derefernce
- scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- gpiolib: cdev: fix uninitialised kfifo
- scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- i2c: smbus: fix NULL function pointer dereference
- platform/x86: wmi: Fix opening of char device
- ipvlan: add ipvlan_route_v6_outbound() helper
- nilfs2: fix underflow in second superblock position calculations
- RDMA: Verify port when creating flow rule
- IB/mlx4: Use port iterator and validation APIs
- ipv6: Fix infinite recursion in fib6_dump_done().
- bpf: Protect against int overflow for stack access size
- ipv4: check for NULL idev in ip_route_use_hint()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.80.0.160" date="1718798400">- !9093 v2  ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9031  bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- !9065  afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- !8933  Fix CVE-2023-52732
- !8927 [sync] PR-8222:  Fix CVE-2023-52672
- !9172 [sync] PR-7041:  netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
- !9171 [sync] PR-6994: v2  net/mlx5e: Prevent deadlock while disabling aRFS
- !8733  batman-adv: Avoid infinite loop trying to resize local TT
- !7374 [sync] PR-6879:  net/smc: Fix possible access to freed memory in link clear
- !9098  Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
- net/mlx5e: Prevent deadlock while disabling aRFS
- !9165  genirq: introduce handle_fasteoi_edge_irq flow handler
- genirq: introduce handle_fasteoi_edge_irq for phytium
- genirq: introduce handle_fasteoi_edge_irq flow handler
- !9139 v2  CVE-2024-36971
- !8495  rpmsg: virtio: Free driver_override when rpmsg_remove()
- !9127  hsr: Prevent use after free in prp_create_tagged_frame()
- !9075  Fix UAF problem of hpool
- !9132  mm: swap: fix race between free_swap_and_cache() and swapoff()
- !9130  ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- !9069  Bluetooth: RFCOMM: Fix not validating setsockopt user input
- !8970  mmc: mmc_spi: fix error handling in mmc_spi_probe()
- !8977 [sync] PR-8584:  virtio-blk: fix implicit overflow on virtio_max_dma_size
- !8701  wifi: cfg80211: check A-MSDU format more carefully
- net: fix kabi breakage in struct dst_ops
- net: fix __dst_negative_advice() race
- net: annotate data-races around sk-&gt;sk_dst_pending_confirm
- mm: swap: fix race between free_swap_and_cache() and swapoff()
- ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- hsr: Prevent use after free in prp_create_tagged_frame()
- !9002  scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- !9056  drm/panel: fix a possible null pointer dereference
- !9054  soc: fsl: qbman: Use raw spinlock for cgr_lock
- !8939  clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- !8952  ACPI: video: check for error while searching for backlight device parent
- !8986 [sync] PR-8639:  s390/qeth: Fix kernel panic after setting hsuid
- Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- !8714  Fix page corruption caused by racy check in __free_pages
- ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9080  Bluetooth: L2CAP: Fix not validating setsockopt user input
- Bluetooth: L2CAP: Fix not validating setsockopt user input
- mm/dynamic_hugetlb: use rcu lock to protect hpool
- mm/dynamic_hugetlb: simplify the refcount code
- !9072 [sync] PR-9015:  CVE-2024-36953
- !9071 [sync] PR-9014:  drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr()
- KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id
- drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- Bluetooth: RFCOMM: Fix not validating setsockopt user input
- afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- !8947 [sync] PR-6800:  block: fix overflow in blk_ioctl_discard()
- !9052  CVE-2024-35796
- drm/panel: fix a possible null pointer dereference
- soc: fsl: qbman: Use raw spinlock for cgr_lock
- !9021  wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- net: ll_temac: platform_get_resource replaced by wrong function
- !9048  IB/hfi1: Restore allocated resources on failed copyout
- IB/hfi1: Restore allocated resources on failed copyout
- !9028  tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- !8830  Fix CVE-2024-35951
- !9009  fix CVE-2024-35839
- !9008  tipc: fix a possible memleak in tipc_buf_append
- !8721  CVE-2024-35887
- !8876  drm/vmwgfx: Fix invalid reads in fence signaled events
- !8884  scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- !8922  hugetlbfs: fix hugetlbfs_statfs() locking
- bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- netfilter: bridge: replace physindev with physinif in nf_bridge_info
- netfilter: propagate net to nf_bridge_get_physindev
- netfilter: nfnetlink_log: use proper helper for fetching physinif
- !8662  usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group
- tipc: fix a possible memleak in tipc_buf_append
- !8617 [sync] PR-8472:  fix CVE-2024-27415
- !8983  fix CVE-2024-36905
- scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- s390/qeth: Fix kernel panic after setting hsuid
- net: relax socket state check at accept time.
- tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets
- virtio-blk: fix implicit overflow on virtio_max_dma_size
- mmc: mmc_spi: fix error handling in mmc_spi_probe()
- ACPI: video: check for error while searching for backlight device parent
- block: fix overflow in blk_ioctl_discard()
- clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- ceph: blocklist the kclient when receiving corrupted snap trace
- ceph: shut down access to inode when async create fails
- ceph: refactor remove_session_caps_cb
- ceph: fix auth cap handling logic in remove_session_caps_cb
- ceph: drop private list from remove_session_caps_cb
- pipe: wakeup wr_wait after setting max_usage
- fs/pipe: move check to pipe_has_watch_queue()
- hugetlbfs: fix hugetlbfs_statfs() locking
- scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- drm/vmwgfx: Fix invalid reads in fence signaled events
- drm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr()
- drm/panfrost: Fix the panfrost_mmu_map_fault_addr() error path
- batman-adv: Avoid infinite loop trying to resize local TT
- ax25: fix use-after-free bugs caused by ax25_ds_del_timer
- Fix page corruption caused by racy check in __free_pages
- wifi: cfg80211: check A-MSDU format more carefully
- usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group
- netfilter: br_netfilter: skip conntrack input hook for promisc packets
- netfilter: bridge: confirm multicast packets before passing them up the stack
- rpmsg: virtio: Free driver_override when rpmsg_remove()
- net/smc: Fix possible access to freed memory in link clear</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.80.0.161" date="1718884800">- Add the pub key in openEuler RPM-PGP certificate</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.81.0.162" date="1719403200">- !8104 [sync] PR-7886:  drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- !9443  net/mlx5: Discard command completions in internal error
- !9448  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9432  hid: cp2112: Fix duplicate workqueue initialization
- !9424  ASoC: SOF: Fix DSP oops stack dump output contents
- !9418 [sync] PR-6683: v2  CVE-2024-26921
- !9296  CVE-2021-47599
- !9403  Fix CVE-2024-31076
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- !9198  init/main.c: Fix potential static_command_line memory overflow
- hid: cp2112: Fix duplicate workqueue initialization
- ASoC: SOF: Fix DSP oops stack dump output contents
- !6742 [sync] PR-6654:  net/ipv6: avoid possible UAF in ip6_route_mpath_notify()
- sk_buff: Fix KABI break for the modification of struct sk_buff
- inet: inet_defrag: prevent sk release while still in use
- net: Fix KABI break for introducing is_skb_wmem()
- skb_expand_head() adjust skb-&gt;truesize incorrectly
- skbuff: introduce skb_expand_head()
- !9349  powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9396  RDMA/hns: Fix deadlock on SRQ async events.
- !9353 [sync] PR-9305:  CVE-2024-26661 following bugfix
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- !9359  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9379  RDMA/hns: Fix UAF for cq async event
- !9291  net: bridge: xmit: make sure we have at least eth header len bytes
- RDMA/hns: Fix deadlock on SRQ async events.
- !9049 [sync] PR-8774:  CVE-2024-36914
- !9263  ring-buffer: Fix a race between readers and resize checks
- RDMA/hns: Fix UAF for cq async event
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- Revert "drm/amd/display: Fix &amp;&amp; vs || typos"
- powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9272  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9274  wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- !9281  drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- !9279  net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- !9213 [sync] PR-9112:  Backport some optimizing patches for kunpeng920
- !9106  ksmbd: no response from compound read
- !9185  spi: Fix deadlock when adding SPI controllers on SPI buses
- net: bridge: xmit: make sure we have at least eth header len bytes
- drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- ring-buffer: Fix a race between readers and resize checks
- !9181  wifi: wilc1000: fix RCU usage in connect path
- !9214  drm/amd/display: Fix division by zero in setup_dsc_config
- !7541 [sync] PR-6801:  block: fix discard
- !9142 v2  CVE-2023-52810
- !8460 [sync] PR-8069:  CVE-2021-47427
- !9155  fix CVE-2023-52791
- !9169  UBIFS: fixes a series of issues that caused by power cut
- !9003  media: tc358743: register v4l2 async device only after successful setup
- !9088  fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Fix division by zero in setup_dsc_config
- arm64: syscall: unmask DAIF for tracing status
- arm64: Snapshot thread flags
- sched: Snapshot thread flags
- entry: Snapshot thread flags
- x86: Snapshot thread flags
- thread_info: Add helpers to snapshot thread flags
- irqchip/gic-v3: Use dsb(ishst) to order writes with ICC_SGI1R_EL1 accesses
- sched/fair: Optimize test_idle_cores() for !SMT
- init/main.c: Fix potential static_command_line memory overflow
- spi: fix kabi breakage in struct spi_controller
- spi: fix use-after-free of the add_lock mutex
- spi: Fix deadlock when adding SPI controllers on SPI buses
- wifi: wilc1000: fix RCU usage in connect path
- ubifs: dbg_orphan_check: Fix missed key type checking
- ubifs: Fix unattached inode when powercut happens in creating
- ubifs: Fix space leak when powercut happens in linking tmpfile
- ubifs: Move ui-&gt;data initialization after initializing security
- ubifs: Fix adding orphan entry twice for the same inode
- ubifs: Remove insert_dead_orphan from replaying orphan process
- ubifs: Don't add xattr inode into orphan area
- ubifs: Fix unattached xattr inode if powercut happens after deleting
- ubifs: Fix some kernel-doc comments
- ubifs: Fix spelling mistakes
- i2c: core: Fix atomic xfer check for non-preempt config
- i2c: core: Run atomic i2c xfer when !preemptible
- fs/jfs: Add check for negative db_l2nbperpage
- jfs: jfs_dmap: Validate db_l2nbperpage while mounting
- ksmbd: no response from compound read
- fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Skip on writeback when it's not applicable
- media: tc358743: register v4l2 async device only after successful setup
- scsi: iscsi: Fix iscsi_task use after free
- scsi: iscsi: Have abort handler get ref to conn
- drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- block: check io size before submit discard
- block: fix overflow in blk_ioctl_discard()
- net/ipv6: avoid possible UAF in ip6_route_mpath_notify()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.82.0.163" date="1719403201">- !9461 [sync] PR-5860:  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9197  scsi: core: Fix unremoved procfs host directory regression
- !9203  dyndbg: fix old BUG_ON in &gt;control parser
- !9195  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9200  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9189  clk: Fix clk_core_get NULL dereference
- !9187  net: phy: fix phy_get_internal_delay accessing an empty array
- !9460 v2  CVE-2024-27032
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- scsi: core: Fix unremoved procfs host directory regression
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.83.0.164" date="1720008000">- !9159  xfs: don't use current-&gt;journal_info
- !9659  fix uaf when proc_cpuset_show
- !9574 [sync] PR-8683: v4  Fix CVE-2024-35879
- !9531  CVE-2024-37356
- !9650  RDMA/hns: Modify the print level of CQE error
- !9495  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- RDMA/hns: Modify the print level of CQE error
- !9515  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9604 [sync] PR-9595:  drm/arm/malidp: fix a possible null pointer dereference
- !9603 [sync] PR-9593:  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9602 [sync] PR-9504:  um: Add winch to winch_handlers before registering winch IRQ
- !9601  CVE-2024-38597
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- um: Add winch to winch_handlers before registering winch IRQ
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9575 [sync] PR-9321:  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9586 [sync] PR-9284:  of: module: add buffer overflow check in of_modalias()
- !9589  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- of: module: add buffer overflow check in of_modalias()
- !9541  net/mlx5e: Avoid field-overflowing memcpy()
- !9480  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9579 [sync] PR-9558:  CVE-2024-39362
- !8565 [sync] PR-8240: v2  dmaengine: idxd: Fix oops during rmmod on single-CPU platforms
- !9545  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9576 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9384  serial: max3100: Update uart_driver_registered on driver removal
- !9564  fs/ntfs3: Check 'folio' pointer for NULL
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- drm/amd/display: Fix potential index out of bounds in color transformation function
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()
- !9484  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9529  media: lgdt3306a: Add a check against null-pointer-def
- fs/ntfs3: Check 'folio' pointer for NULL
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- !9375  ALSA: core: Fix NULL module pointer assignment at card init
- !9468  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9458  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- !9431  CVE-2022-48703
- !9364  fs/ntfs3: Use variable length array instead of fixed size
- media: lgdt3306a: Add a check against null-pointer-def
- !9411  kprobes: Fix possible use-after-free issue on kprobe registration
- !8743  ext4 bugfix from mainline
- !9498  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9397 [sync] PR-9350:  tracing: Fix permissions for the buffer_percent file
- !9334  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8712  ubifs: Set page uptodate in the correct place
- !9259  Fix CVE-2024-38588
- !9385  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9454  jffs2: prevent xattr node from overflowing the eraseblock
- !9328  CVE-2024-38596
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- kprobes: Fix possible use-after-free issue on kprobe registration
- tracing: Fix permissions for the buffer_percent file
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- af_unix: Fix data-races around sk-&gt;sk_shutdown.
- af_unix: Fix data races around sk-&gt;sk_shutdown.
- ftrace: Fix possible use-after-free issue in ftrace_location()
- ftrace: Fix possible warning on checking all pages used in ftrace_process_locs()
- ftrace: Store the order of pages allocated in ftrace_page
- xfs: don't use current-&gt;journal_info
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- ubifs: Set page uptodate in the correct place
- dmaengine: idxd: Fix oops during rmmod on single-CPU platforms</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.84.0.165" date="1720612800">- !9852  net/sched: act_skbmod: prevent kernel-infoleak
- !9854  nilfs2: fix use-after-free of timer for log writer thread
- !9855 [sync] PR-8096:  Fix CVE-2024-35988
- !9469 [sync] PR-8098:  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !9833  mmc: davinci: Don't strip remove function when driver is builtin
- !9847 [sync] PR-9500:  netfilter: nf_tables: flush pending destroy work before exit_net release
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- netfilter: nf_tables: flush pending destroy work before exit_net release
- mmc: davinci: Don't strip remove function when driver is builtin
- !9651  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9818  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9806  CVE-2024-36478
- !9773  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- null_blk: Move driver into its own directory
- !9794  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9790  clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- !9661 v3  Fix CVE-2024-38567
- !9552  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9767  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9769  iomap: Don't finish dio under irq when there exists pages
- !9774  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- !9733  drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9718  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9762  CVE-2024-26816
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9717  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- !9702  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9738  CVE-2024-38621
- !9673  ax25: Fix reference count leak issue of net_device
- !9734  net/9p: fix uninit-value in p9_client_rpc()
- !9740  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9739  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- media: stk1160: fix bounds checking in stk1160_copy_video()
- net/9p: fix uninit-value in p9_client_rpc()
- drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- !9722  ext4: delete redundant uptodate
- ext4: delete redundant uptodate check for buffer
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9641  CVE-2024-38582
- !9663  tls: fix missing memory barrier in tls_init
- !9656 v2  CVE-2024-38586
- !9685  greybus: lights: check return of get_channel_from_mode
- !9671  crypto: bcm - Fix pointer arithmetic
- !9635  fix CVE-2022-48721
- greybus: lights: check return of get_channel_from_mode
- ax25: Fix reference count leak issue of net_device
- crypto: bcm - Fix pointer arithmetic
- tls: fix missing memory barrier in tls_init
- wifi: carl9170: add a proper sanity check for endpoints
- USB: core: Add routines for endpoint checks in old drivers
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- net/smc: Fix slab-out-of-bounds issue in fallback
- net/smc: Only save the original clcsock callback functions
- net/smc: Avoid overwriting the copies of clcsock callback functions
- net/smc: Forward wakeup to smc socket waitqueue after fallback
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.85.0.166" date="1721217600">- !10068 [sync] PR-9984:  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !10032  ipv6: prevent possible NULL dereference in rt6_probe()
- !10063  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9991  netpoll: Fix race condition in netpoll_owner_active
- !10043  lib/generic-radix-tree.c: Don't overflow in peek()
- !9951  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9981  CVE-2024-40972
- !9995  Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- !9846 v2  CVE-2024-38598
- !9907  sock_map: avoid race between sock_map_close and sk_psock_put
- !9927  ocfs2: fix races between hole punching and AIO+DIO
- !9912  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9947  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9969 v2  netfilter: nft_set_pipapo: do not free live element
- !9980  Fix CVE-2023-52781
- !9954  drm/komeda: check for error-valued pointer
- !9923  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- netpoll: Fix race condition in netpoll_owner_active
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- ext4: remove duplicate definition of ext4_xattr_ibody_inline_set()
- usb: config: fix iteration issue in 'usb_get_bos_descriptor()'
- USB: core: Change configuration warnings to notices
- netfilter: nft_set_pipapo: do not free live element
- !9869  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9906  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9894  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9828  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9826  smb: client: fix potential deadlock when releasing mids
- !9890  ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9822 [sync] PR-9712:  fix CVE-2024-38540
- !9823 [sync] PR-9711:  fix CVE-2024-38615
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9840  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9873  CVE-2024-38570
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9636  ice: Do not use WQ_MEM_RECLAIM flag for workqueue
- !9747  CVE-2024-39469
- !9844  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- ice: Do not use WQ_MEM_RECLAIM flag for workqueue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.86.0.167" date="1721822400">- !10283 v2  CVE-2022-48816
- !9781  ksmbd: fix wrong DataOffset validation of create context
- !10301 v2  usb-storage: alauda: Check whether the media is initialized
- !10297  CVE-2023-52679
- usb-storage: alauda: Check whether the media is initialized
- !10263  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- of: unittest: Fix compile in the non-dynamic case
- of: unittest: Fix of_count_phandle_with_args() expected value message
- of: Fix double free in of_parse_phandle_with_args_map
- !10225  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10244  Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10230  ima: Fix use-after-free on a dentry's dname.name
- !10235  ima: Avoid blocking in RCU read-side critical section
- !10234  fix CVE-2024-41007
- !10201  net: dsa: seville: register the mdiobus under devres
- !10267  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !10256  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !9918  powerpc/pseries: Enforce hcall result buffer validity and size
- !10223  CVE-2024-35931
- !10085  nfs: Ensure that the NFS client returns a correct writeback error code
- ima: Avoid blocking in RCU read-side critical section
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- net: tcp: fix unexcepted socket die when snd_wnd is 0
- !10181 [sync] PR-9836:  fpga: manager: add owner module and take its refcount
- !10221  bpf: Fix overrunning reservations in ringbuf
- ima: Fix use-after-free on a dentry's dname.name
- !10200  dma-mapping: benchmark: fix node id validation
- !10209  drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10020  drm/exynos/vidi: fix memory leak in .get_modes()
- scsi: ufs: Fix a deadlock in the error handler
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- bpf: Fix overrunning reservations in ringbuf
- drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10136  ALSA: timer: Set lower bound of start tick time
- !10105  ecryptfs: Fix buffer size for tag 66 packet
- net: dsa: seville: register the mdiobus under devres
- dma-mapping: benchmark: fix node id validation
- !10140 [sync] PR-10095:  CVE-2024-40968
- !10108  tracing: Build event generation tests only as modules
- !10157 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10008  xfs: fix mount hung while sb recover fail
- fpga: manager: add owner module and take its refcount
- !10164  drop_monitor: replace spin_lock by raw_spin_lock
- !10163  RDMA/mlx5: Add check for srq max_sge attribute
- !10049  tipc: force a dst refcount before doing decryption
- !10023  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10042  Fix CVE-2024-36939
- MIPS: Octeon: Add PCIe link status check
- !10129  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10119  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10080  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10053  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10089  fix CVE-2024-40995
- !9993  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9902  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10098 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9932  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- ksmbd: fix wrong DataOffset validation of create context</changelog>
</package>
<package pkgid="21e87c204b604d99b4ecf70bf323d531c96bbc1d3b173cc920f3468064ececce" name="kernel" arch="src">
  <version epoch="0" ver="5.10.0" rel="136.87.0.168.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.79.0.159" date="1718193600">- !8950  aio: fix mremap after fork null-deref
- !8948  CVE-2022-48652
- !8866  ipv6: prevent NULL dereference in ip6_output()
- !8780  smb: client: fix UAF in smb2_reconnect_server()
- !8859  net/smc: avoid data corruption caused by decline
- !8722 v2  SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !8964  Fix CVE-2024-35915
- !8963  Fix CVE-2024-35915
- !8735  mptcp: ensure snd_nxt is properly initialized on connect
- !8761  tipc: fix UAF in error path
- !8741  octeontx2-af: avoid off-by-one read from userspace
- !8953  powerpc/powernv: Add a null pointer check in opal_event_init()
- !8685  mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- !8967  Fix CVE-2024-36949
- !8861  blk-iocost: do not WARN if iocg was already offlined
- !8841 v2  IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- !8945  usb: typec: ucsi: Limit read size on v1.2
- !8905  ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8709 [sync] PR-8046:  block: prevent division by zero in blk_rq_stat_sum()
- !8839  blk-iocost: avoid out of bounds shift
- !8857  PCI/PM: Drain runtime-idle callbacks before driver removal
- amd/amdkfd: sync all devices to wait all processes being evicted
- drm/amdkfd: Rework kfd_locked handling
- !8911  net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- !8915  gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- !8788 [sync] PR-8558:  xen-netfront: Add missing skb_mark_for_recycle
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- powerpc/powernv: Add a null pointer check in opal_event_init()
- aio: fix mremap after fork null-deref
- ice: Fix crash by keep old cfg when update TCs more than queues
- ice: ethtool: Prohibit improper channel config for DCB
- !8880  net: core: reject skb_copy(_expand) for fraglist GSO skbs
- usb: typec: ucsi: Limit read size on v1.2
- !8892  net: fix out-of-bounds access in ops_init
- !8810  net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8672  fix CVE-2024-36021 and CVE-2024-36900
- !8886  CVE-2024-36933
- gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8755  drm/amd/display: Avoid NULL dereference of timing generator
- !8754  pwm: Fix double shift bug
- !8850  ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- net: fix out-of-bounds access in ops_init
- !8665  phonet/pep: fix racy skb_queue_empty() use
- nsh: Restore skb-&gt;{protocol,data,mac_header} for outer header in nsh_gso_segment().
- net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment()
- net: core: reject skb_copy(_expand) for fraglist GSO skbs
- ipv6: prevent NULL dereference in ip6_output()
- blk-iocost: do not WARN if iocg was already offlined
- net/smc: avoid data corruption caused by decline
- PCI/PM: Drain runtime-idle callbacks before driver removal
- ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- !8687  tcp: properly terminate timers for kernel sockets
- !8630  erspan: make sure erspan_base_hdr is present in skb-&gt;head
- IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- blk-iocost: avoid out of bounds shift
- !7988 [sync] PR-7960:  ipv6: Fix infinite recursion in fib6_dump_done().
- !8388 [sync] PR-8300:  ipvlan: add ipvlan_route_v6_outbound() helper
- !8282 [sync] PR-8133:  fix CVE-2021-47265
- !7925 [sync] PR-7741:  ipv4: check for NULL idev in ip_route_use_hint()
- !8724  tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- !8480  scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- !8622  fs/9p: only translate RWX permissions for plain 9P2000
- net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8728  net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8790  Bluetooth: SCO: Fix not validating setsockopt user input
- !8680  rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- !8713 [sync] PR-8583:  mmc: sdhci-msm: pervent access to suspended controller
- !8670  CVE-2024-35854
- Bluetooth: SCO: Fix not validating setsockopt user input
- !8696  clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- !8653 v3  clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- xen-netfront: Add missing skb_mark_for_recycle
- !8571  jfs: fix two array-index-out-of-bounds issuse
- !8356  nilfs2: fix underflow in second superblock position calculations
- !8592  geneve: fix header validation in geneve[6
- !8531  gpiolib: cdev: fix uninitialised kfifo
- smb: client: fix UAF in smb2_reconnect_server()
- !8631 [sync] PR-8519:  mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- tipc: fix UAF in error path
- !8751  ubifs: Check @c-&gt;dirty_[n|p
- drm/amd/display: Avoid NULL dereference of timing generator
- pwm: Fix double shift bug
- !8633 [sync] PR-8425:  CVE-2023-52677
- ubifs: Check @c-&gt;dirty_[n|p]n_cnt and @c-&gt;nroot state under @c-&gt;lp_mutex
- octeontx2-af: avoid off-by-one read from userspace
- !8669  wifi: ath11k: fix dfs radar event locking
- !8619  CVE-2024-35896
- !8608  CVE-2024-35895
- mptcp: ensure snd_nxt is properly initialized on connect
- !8659  wifi: ath11k: fix htt pktlog locking
- !8587  fix CVE-2021-47558
- net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8569  fix CVE-2024-36906
- tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !7933  bpf: Protect against int overflow for stack access size
- !8627 [sync] PR-8561:  mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- !8625 [sync] PR-8497:  Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- mmc: sdhci-msm: pervent access to suspended controller
- !8572  xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- block: prevent division by zero in blk_rq_stat_sum()
- clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- tcp: properly terminate timers for kernel sockets
- mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- net: hns3: fix kernel crash when devlink reload during initialization
- net: hns3: release PTP resources if pf initialization failed
- net: hns3: fix kernel crash when devlink reload during vf initialization
- net: hns3: fix kernel crash when devlink reload during pf initialization
- mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash
- wifi: ath11k: fix dfs radar event locking
- phonet/pep: fix racy skb_queue_empty() use
- wifi: ath11k: fix htt pktlog locking
- clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- !8537  scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- !8538  drm/amdgpu: Fix potential null pointer derefernce
- !8540  s390/dasd: protect device queue against concurrent access
- !8462  i2c: smbus: fix NULL function pointer dereference
- !8432  platform/x86: wmi: Fix opening of char device
- riscv: Check if the code to patch lies in the exit section
- mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- erspan: make sure erspan_base_hdr is present in skb-&gt;head
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- fs/9p: only translate RWX permissions for plain 9P2000
- netfilter: complete validation of user input
- netfilter: validate user input for expected length
- Revert "bpf, sockmap: Prevent lock inversion deadlock in map delete elem"
- bpf: Allow delete from sockmap/sockhash only if update is allowed
- bpf, sockmap: Prevent lock inversion deadlock in map delete elem
- geneve: fix header validation in geneve[6]_xmit_skb
- net: stmmac: Disable Tx queues when reconfiguring the interface
- xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- jfs: fix array-index-out-of-bounds in dbFindLeaf
- fs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev
- ARM: 9381/1: kasan: clear stale stack poison
- s390/dasd: protect device queue against concurrent access
- drm/amdgpu: Fix potential null pointer derefernce
- scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- gpiolib: cdev: fix uninitialised kfifo
- scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- i2c: smbus: fix NULL function pointer dereference
- platform/x86: wmi: Fix opening of char device
- ipvlan: add ipvlan_route_v6_outbound() helper
- nilfs2: fix underflow in second superblock position calculations
- RDMA: Verify port when creating flow rule
- IB/mlx4: Use port iterator and validation APIs
- ipv6: Fix infinite recursion in fib6_dump_done().
- bpf: Protect against int overflow for stack access size
- ipv4: check for NULL idev in ip_route_use_hint()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.80.0.160" date="1718798400">- !9093 v2  ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9031  bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- !9065  afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- !8933  Fix CVE-2023-52732
- !8927 [sync] PR-8222:  Fix CVE-2023-52672
- !9172 [sync] PR-7041:  netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
- !9171 [sync] PR-6994: v2  net/mlx5e: Prevent deadlock while disabling aRFS
- !8733  batman-adv: Avoid infinite loop trying to resize local TT
- !7374 [sync] PR-6879:  net/smc: Fix possible access to freed memory in link clear
- !9098  Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
- net/mlx5e: Prevent deadlock while disabling aRFS
- !9165  genirq: introduce handle_fasteoi_edge_irq flow handler
- genirq: introduce handle_fasteoi_edge_irq for phytium
- genirq: introduce handle_fasteoi_edge_irq flow handler
- !9139 v2  CVE-2024-36971
- !8495  rpmsg: virtio: Free driver_override when rpmsg_remove()
- !9127  hsr: Prevent use after free in prp_create_tagged_frame()
- !9075  Fix UAF problem of hpool
- !9132  mm: swap: fix race between free_swap_and_cache() and swapoff()
- !9130  ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- !9069  Bluetooth: RFCOMM: Fix not validating setsockopt user input
- !8970  mmc: mmc_spi: fix error handling in mmc_spi_probe()
- !8977 [sync] PR-8584:  virtio-blk: fix implicit overflow on virtio_max_dma_size
- !8701  wifi: cfg80211: check A-MSDU format more carefully
- net: fix kabi breakage in struct dst_ops
- net: fix __dst_negative_advice() race
- net: annotate data-races around sk-&gt;sk_dst_pending_confirm
- mm: swap: fix race between free_swap_and_cache() and swapoff()
- ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- hsr: Prevent use after free in prp_create_tagged_frame()
- !9002  scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- !9056  drm/panel: fix a possible null pointer dereference
- !9054  soc: fsl: qbman: Use raw spinlock for cgr_lock
- !8939  clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- !8952  ACPI: video: check for error while searching for backlight device parent
- !8986 [sync] PR-8639:  s390/qeth: Fix kernel panic after setting hsuid
- Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- !8714  Fix page corruption caused by racy check in __free_pages
- ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9080  Bluetooth: L2CAP: Fix not validating setsockopt user input
- Bluetooth: L2CAP: Fix not validating setsockopt user input
- mm/dynamic_hugetlb: use rcu lock to protect hpool
- mm/dynamic_hugetlb: simplify the refcount code
- !9072 [sync] PR-9015:  CVE-2024-36953
- !9071 [sync] PR-9014:  drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr()
- KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id
- drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- Bluetooth: RFCOMM: Fix not validating setsockopt user input
- afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- !8947 [sync] PR-6800:  block: fix overflow in blk_ioctl_discard()
- !9052  CVE-2024-35796
- drm/panel: fix a possible null pointer dereference
- soc: fsl: qbman: Use raw spinlock for cgr_lock
- !9021  wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- net: ll_temac: platform_get_resource replaced by wrong function
- !9048  IB/hfi1: Restore allocated resources on failed copyout
- IB/hfi1: Restore allocated resources on failed copyout
- !9028  tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- !8830  Fix CVE-2024-35951
- !9009  fix CVE-2024-35839
- !9008  tipc: fix a possible memleak in tipc_buf_append
- !8721  CVE-2024-35887
- !8876  drm/vmwgfx: Fix invalid reads in fence signaled events
- !8884  scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- !8922  hugetlbfs: fix hugetlbfs_statfs() locking
- bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- netfilter: bridge: replace physindev with physinif in nf_bridge_info
- netfilter: propagate net to nf_bridge_get_physindev
- netfilter: nfnetlink_log: use proper helper for fetching physinif
- !8662  usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group
- tipc: fix a possible memleak in tipc_buf_append
- !8617 [sync] PR-8472:  fix CVE-2024-27415
- !8983  fix CVE-2024-36905
- scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- s390/qeth: Fix kernel panic after setting hsuid
- net: relax socket state check at accept time.
- tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets
- virtio-blk: fix implicit overflow on virtio_max_dma_size
- mmc: mmc_spi: fix error handling in mmc_spi_probe()
- ACPI: video: check for error while searching for backlight device parent
- block: fix overflow in blk_ioctl_discard()
- clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- ceph: blocklist the kclient when receiving corrupted snap trace
- ceph: shut down access to inode when async create fails
- ceph: refactor remove_session_caps_cb
- ceph: fix auth cap handling logic in remove_session_caps_cb
- ceph: drop private list from remove_session_caps_cb
- pipe: wakeup wr_wait after setting max_usage
- fs/pipe: move check to pipe_has_watch_queue()
- hugetlbfs: fix hugetlbfs_statfs() locking
- scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- drm/vmwgfx: Fix invalid reads in fence signaled events
- drm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr()
- drm/panfrost: Fix the panfrost_mmu_map_fault_addr() error path
- batman-adv: Avoid infinite loop trying to resize local TT
- ax25: fix use-after-free bugs caused by ax25_ds_del_timer
- Fix page corruption caused by racy check in __free_pages
- wifi: cfg80211: check A-MSDU format more carefully
- usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group
- netfilter: br_netfilter: skip conntrack input hook for promisc packets
- netfilter: bridge: confirm multicast packets before passing them up the stack
- rpmsg: virtio: Free driver_override when rpmsg_remove()
- net/smc: Fix possible access to freed memory in link clear</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.80.0.161" date="1718884800">- Add the pub key in openEuler RPM-PGP certificate</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.81.0.162" date="1719403200">- !8104 [sync] PR-7886:  drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- !9443  net/mlx5: Discard command completions in internal error
- !9448  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9432  hid: cp2112: Fix duplicate workqueue initialization
- !9424  ASoC: SOF: Fix DSP oops stack dump output contents
- !9418 [sync] PR-6683: v2  CVE-2024-26921
- !9296  CVE-2021-47599
- !9403  Fix CVE-2024-31076
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- !9198  init/main.c: Fix potential static_command_line memory overflow
- hid: cp2112: Fix duplicate workqueue initialization
- ASoC: SOF: Fix DSP oops stack dump output contents
- !6742 [sync] PR-6654:  net/ipv6: avoid possible UAF in ip6_route_mpath_notify()
- sk_buff: Fix KABI break for the modification of struct sk_buff
- inet: inet_defrag: prevent sk release while still in use
- net: Fix KABI break for introducing is_skb_wmem()
- skb_expand_head() adjust skb-&gt;truesize incorrectly
- skbuff: introduce skb_expand_head()
- !9349  powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9396  RDMA/hns: Fix deadlock on SRQ async events.
- !9353 [sync] PR-9305:  CVE-2024-26661 following bugfix
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- !9359  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9379  RDMA/hns: Fix UAF for cq async event
- !9291  net: bridge: xmit: make sure we have at least eth header len bytes
- RDMA/hns: Fix deadlock on SRQ async events.
- !9049 [sync] PR-8774:  CVE-2024-36914
- !9263  ring-buffer: Fix a race between readers and resize checks
- RDMA/hns: Fix UAF for cq async event
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- Revert "drm/amd/display: Fix &amp;&amp; vs || typos"
- powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9272  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9274  wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- !9281  drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- !9279  net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- !9213 [sync] PR-9112:  Backport some optimizing patches for kunpeng920
- !9106  ksmbd: no response from compound read
- !9185  spi: Fix deadlock when adding SPI controllers on SPI buses
- net: bridge: xmit: make sure we have at least eth header len bytes
- drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- ring-buffer: Fix a race between readers and resize checks
- !9181  wifi: wilc1000: fix RCU usage in connect path
- !9214  drm/amd/display: Fix division by zero in setup_dsc_config
- !7541 [sync] PR-6801:  block: fix discard
- !9142 v2  CVE-2023-52810
- !8460 [sync] PR-8069:  CVE-2021-47427
- !9155  fix CVE-2023-52791
- !9169  UBIFS: fixes a series of issues that caused by power cut
- !9003  media: tc358743: register v4l2 async device only after successful setup
- !9088  fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Fix division by zero in setup_dsc_config
- arm64: syscall: unmask DAIF for tracing status
- arm64: Snapshot thread flags
- sched: Snapshot thread flags
- entry: Snapshot thread flags
- x86: Snapshot thread flags
- thread_info: Add helpers to snapshot thread flags
- irqchip/gic-v3: Use dsb(ishst) to order writes with ICC_SGI1R_EL1 accesses
- sched/fair: Optimize test_idle_cores() for !SMT
- init/main.c: Fix potential static_command_line memory overflow
- spi: fix kabi breakage in struct spi_controller
- spi: fix use-after-free of the add_lock mutex
- spi: Fix deadlock when adding SPI controllers on SPI buses
- wifi: wilc1000: fix RCU usage in connect path
- ubifs: dbg_orphan_check: Fix missed key type checking
- ubifs: Fix unattached inode when powercut happens in creating
- ubifs: Fix space leak when powercut happens in linking tmpfile
- ubifs: Move ui-&gt;data initialization after initializing security
- ubifs: Fix adding orphan entry twice for the same inode
- ubifs: Remove insert_dead_orphan from replaying orphan process
- ubifs: Don't add xattr inode into orphan area
- ubifs: Fix unattached xattr inode if powercut happens after deleting
- ubifs: Fix some kernel-doc comments
- ubifs: Fix spelling mistakes
- i2c: core: Fix atomic xfer check for non-preempt config
- i2c: core: Run atomic i2c xfer when !preemptible
- fs/jfs: Add check for negative db_l2nbperpage
- jfs: jfs_dmap: Validate db_l2nbperpage while mounting
- ksmbd: no response from compound read
- fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Skip on writeback when it's not applicable
- media: tc358743: register v4l2 async device only after successful setup
- scsi: iscsi: Fix iscsi_task use after free
- scsi: iscsi: Have abort handler get ref to conn
- drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- block: check io size before submit discard
- block: fix overflow in blk_ioctl_discard()
- net/ipv6: avoid possible UAF in ip6_route_mpath_notify()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.82.0.163" date="1719403201">- !9461 [sync] PR-5860:  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9197  scsi: core: Fix unremoved procfs host directory regression
- !9203  dyndbg: fix old BUG_ON in &gt;control parser
- !9195  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9200  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9189  clk: Fix clk_core_get NULL dereference
- !9187  net: phy: fix phy_get_internal_delay accessing an empty array
- !9460 v2  CVE-2024-27032
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- scsi: core: Fix unremoved procfs host directory regression
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.83.0.164" date="1720008000">- !9159  xfs: don't use current-&gt;journal_info
- !9659  fix uaf when proc_cpuset_show
- !9574 [sync] PR-8683: v4  Fix CVE-2024-35879
- !9531  CVE-2024-37356
- !9650  RDMA/hns: Modify the print level of CQE error
- !9495  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- RDMA/hns: Modify the print level of CQE error
- !9515  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9604 [sync] PR-9595:  drm/arm/malidp: fix a possible null pointer dereference
- !9603 [sync] PR-9593:  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9602 [sync] PR-9504:  um: Add winch to winch_handlers before registering winch IRQ
- !9601  CVE-2024-38597
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- um: Add winch to winch_handlers before registering winch IRQ
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9575 [sync] PR-9321:  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9586 [sync] PR-9284:  of: module: add buffer overflow check in of_modalias()
- !9589  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- of: module: add buffer overflow check in of_modalias()
- !9541  net/mlx5e: Avoid field-overflowing memcpy()
- !9480  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9579 [sync] PR-9558:  CVE-2024-39362
- !8565 [sync] PR-8240: v2  dmaengine: idxd: Fix oops during rmmod on single-CPU platforms
- !9545  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9576 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9384  serial: max3100: Update uart_driver_registered on driver removal
- !9564  fs/ntfs3: Check 'folio' pointer for NULL
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- drm/amd/display: Fix potential index out of bounds in color transformation function
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()
- !9484  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9529  media: lgdt3306a: Add a check against null-pointer-def
- fs/ntfs3: Check 'folio' pointer for NULL
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- !9375  ALSA: core: Fix NULL module pointer assignment at card init
- !9468  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9458  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- !9431  CVE-2022-48703
- !9364  fs/ntfs3: Use variable length array instead of fixed size
- media: lgdt3306a: Add a check against null-pointer-def
- !9411  kprobes: Fix possible use-after-free issue on kprobe registration
- !8743  ext4 bugfix from mainline
- !9498  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9397 [sync] PR-9350:  tracing: Fix permissions for the buffer_percent file
- !9334  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8712  ubifs: Set page uptodate in the correct place
- !9259  Fix CVE-2024-38588
- !9385  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9454  jffs2: prevent xattr node from overflowing the eraseblock
- !9328  CVE-2024-38596
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- kprobes: Fix possible use-after-free issue on kprobe registration
- tracing: Fix permissions for the buffer_percent file
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- af_unix: Fix data-races around sk-&gt;sk_shutdown.
- af_unix: Fix data races around sk-&gt;sk_shutdown.
- ftrace: Fix possible use-after-free issue in ftrace_location()
- ftrace: Fix possible warning on checking all pages used in ftrace_process_locs()
- ftrace: Store the order of pages allocated in ftrace_page
- xfs: don't use current-&gt;journal_info
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- ubifs: Set page uptodate in the correct place
- dmaengine: idxd: Fix oops during rmmod on single-CPU platforms</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.84.0.165" date="1720612800">- !9852  net/sched: act_skbmod: prevent kernel-infoleak
- !9854  nilfs2: fix use-after-free of timer for log writer thread
- !9855 [sync] PR-8096:  Fix CVE-2024-35988
- !9469 [sync] PR-8098:  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !9833  mmc: davinci: Don't strip remove function when driver is builtin
- !9847 [sync] PR-9500:  netfilter: nf_tables: flush pending destroy work before exit_net release
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- netfilter: nf_tables: flush pending destroy work before exit_net release
- mmc: davinci: Don't strip remove function when driver is builtin
- !9651  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9818  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9806  CVE-2024-36478
- !9773  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- null_blk: Move driver into its own directory
- !9794  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9790  clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- !9661 v3  Fix CVE-2024-38567
- !9552  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9767  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9769  iomap: Don't finish dio under irq when there exists pages
- !9774  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- !9733  drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9718  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9762  CVE-2024-26816
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9717  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- !9702  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9738  CVE-2024-38621
- !9673  ax25: Fix reference count leak issue of net_device
- !9734  net/9p: fix uninit-value in p9_client_rpc()
- !9740  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9739  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- media: stk1160: fix bounds checking in stk1160_copy_video()
- net/9p: fix uninit-value in p9_client_rpc()
- drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- !9722  ext4: delete redundant uptodate
- ext4: delete redundant uptodate check for buffer
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9641  CVE-2024-38582
- !9663  tls: fix missing memory barrier in tls_init
- !9656 v2  CVE-2024-38586
- !9685  greybus: lights: check return of get_channel_from_mode
- !9671  crypto: bcm - Fix pointer arithmetic
- !9635  fix CVE-2022-48721
- greybus: lights: check return of get_channel_from_mode
- ax25: Fix reference count leak issue of net_device
- crypto: bcm - Fix pointer arithmetic
- tls: fix missing memory barrier in tls_init
- wifi: carl9170: add a proper sanity check for endpoints
- USB: core: Add routines for endpoint checks in old drivers
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- net/smc: Fix slab-out-of-bounds issue in fallback
- net/smc: Only save the original clcsock callback functions
- net/smc: Avoid overwriting the copies of clcsock callback functions
- net/smc: Forward wakeup to smc socket waitqueue after fallback
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.85.0.166" date="1721217600">- !10068 [sync] PR-9984:  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !10032  ipv6: prevent possible NULL dereference in rt6_probe()
- !10063  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9991  netpoll: Fix race condition in netpoll_owner_active
- !10043  lib/generic-radix-tree.c: Don't overflow in peek()
- !9951  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9981  CVE-2024-40972
- !9995  Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- !9846 v2  CVE-2024-38598
- !9907  sock_map: avoid race between sock_map_close and sk_psock_put
- !9927  ocfs2: fix races between hole punching and AIO+DIO
- !9912  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9947  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9969 v2  netfilter: nft_set_pipapo: do not free live element
- !9980  Fix CVE-2023-52781
- !9954  drm/komeda: check for error-valued pointer
- !9923  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- netpoll: Fix race condition in netpoll_owner_active
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- ext4: remove duplicate definition of ext4_xattr_ibody_inline_set()
- usb: config: fix iteration issue in 'usb_get_bos_descriptor()'
- USB: core: Change configuration warnings to notices
- netfilter: nft_set_pipapo: do not free live element
- !9869  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9906  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9894  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9828  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9826  smb: client: fix potential deadlock when releasing mids
- !9890  ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9822 [sync] PR-9712:  fix CVE-2024-38540
- !9823 [sync] PR-9711:  fix CVE-2024-38615
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9840  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9873  CVE-2024-38570
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9636  ice: Do not use WQ_MEM_RECLAIM flag for workqueue
- !9747  CVE-2024-39469
- !9844  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- ice: Do not use WQ_MEM_RECLAIM flag for workqueue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.86.0.167" date="1721822400">- !10283 v2  CVE-2022-48816
- !9781  ksmbd: fix wrong DataOffset validation of create context
- !10301 v2  usb-storage: alauda: Check whether the media is initialized
- !10297  CVE-2023-52679
- usb-storage: alauda: Check whether the media is initialized
- !10263  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- of: unittest: Fix compile in the non-dynamic case
- of: unittest: Fix of_count_phandle_with_args() expected value message
- of: Fix double free in of_parse_phandle_with_args_map
- !10225  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10244  Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10230  ima: Fix use-after-free on a dentry's dname.name
- !10235  ima: Avoid blocking in RCU read-side critical section
- !10234  fix CVE-2024-41007
- !10201  net: dsa: seville: register the mdiobus under devres
- !10267  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !10256  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !9918  powerpc/pseries: Enforce hcall result buffer validity and size
- !10223  CVE-2024-35931
- !10085  nfs: Ensure that the NFS client returns a correct writeback error code
- ima: Avoid blocking in RCU read-side critical section
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- net: tcp: fix unexcepted socket die when snd_wnd is 0
- !10181 [sync] PR-9836:  fpga: manager: add owner module and take its refcount
- !10221  bpf: Fix overrunning reservations in ringbuf
- ima: Fix use-after-free on a dentry's dname.name
- !10200  dma-mapping: benchmark: fix node id validation
- !10209  drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10020  drm/exynos/vidi: fix memory leak in .get_modes()
- scsi: ufs: Fix a deadlock in the error handler
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- bpf: Fix overrunning reservations in ringbuf
- drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10136  ALSA: timer: Set lower bound of start tick time
- !10105  ecryptfs: Fix buffer size for tag 66 packet
- net: dsa: seville: register the mdiobus under devres
- dma-mapping: benchmark: fix node id validation
- !10140 [sync] PR-10095:  CVE-2024-40968
- !10108  tracing: Build event generation tests only as modules
- !10157 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10008  xfs: fix mount hung while sb recover fail
- fpga: manager: add owner module and take its refcount
- !10164  drop_monitor: replace spin_lock by raw_spin_lock
- !10163  RDMA/mlx5: Add check for srq max_sge attribute
- !10049  tipc: force a dst refcount before doing decryption
- !10023  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10042  Fix CVE-2024-36939
- MIPS: Octeon: Add PCIe link status check
- !10129  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10119  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10080  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10053  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10089  fix CVE-2024-40995
- !9993  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9902  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10098 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9932  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- ksmbd: fix wrong DataOffset validation of create context</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.87.0.168" date="1722427200">- !10435  md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !8942 [sync] PR-8468: v2  CVE-2024-35808
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !10067  iommu: Return right value in iommu_sva_bind_device()
- !10335  fix CVE-2024-36479 for sp1
- !10365  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10213  net: mvpp2: clear BM pool before initialization
- !10212  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- !10396  BMA: Fix DMA reset problem and change the version number
- !10343  fix CVE-2024-27010
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !10367 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10322  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- net/sched: initialize noop_qdisc owner
- net/sched: fix kabi change in struct Qdisc
- net/sched: Fix mirred deadlock on device recursion
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- !9369  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10072  serial: imx: Introduce timeout when waiting on transmitter empty
- !9975  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10314 [sync] PR-10187:  fix CVE-2021-47205
- !10313 [sync] PR-10189:  fix CVE-2024-40915
- !10252  fbdev: savage: Handle err return when savagefb_check_var failed
- !10308  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10259  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- fbdev: savage: Handle err return when savagefb_check_var failed
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- md/dm-raid: don't clear MD_RECOVERY_FROZEN after setting frozen
- md/dm-raid: don't call md_reap_sync_thread() directly</changelog>
</package>
<package pkgid="da9df07296ad42da085b67c713a966043fce4a2427bfd9316e6b306825c77ffe" name="kernel" arch="src">
  <version epoch="0" ver="5.10.0" rel="136.88.0.169.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.80.0.160" date="1718798400">- !9093 v2  ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9031  bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- !9065  afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- !8933  Fix CVE-2023-52732
- !8927 [sync] PR-8222:  Fix CVE-2023-52672
- !9172 [sync] PR-7041:  netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
- !9171 [sync] PR-6994: v2  net/mlx5e: Prevent deadlock while disabling aRFS
- !8733  batman-adv: Avoid infinite loop trying to resize local TT
- !7374 [sync] PR-6879:  net/smc: Fix possible access to freed memory in link clear
- !9098  Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
- net/mlx5e: Prevent deadlock while disabling aRFS
- !9165  genirq: introduce handle_fasteoi_edge_irq flow handler
- genirq: introduce handle_fasteoi_edge_irq for phytium
- genirq: introduce handle_fasteoi_edge_irq flow handler
- !9139 v2  CVE-2024-36971
- !8495  rpmsg: virtio: Free driver_override when rpmsg_remove()
- !9127  hsr: Prevent use after free in prp_create_tagged_frame()
- !9075  Fix UAF problem of hpool
- !9132  mm: swap: fix race between free_swap_and_cache() and swapoff()
- !9130  ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- !9069  Bluetooth: RFCOMM: Fix not validating setsockopt user input
- !8970  mmc: mmc_spi: fix error handling in mmc_spi_probe()
- !8977 [sync] PR-8584:  virtio-blk: fix implicit overflow on virtio_max_dma_size
- !8701  wifi: cfg80211: check A-MSDU format more carefully
- net: fix kabi breakage in struct dst_ops
- net: fix __dst_negative_advice() race
- net: annotate data-races around sk-&gt;sk_dst_pending_confirm
- mm: swap: fix race between free_swap_and_cache() and swapoff()
- ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- hsr: Prevent use after free in prp_create_tagged_frame()
- !9002  scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- !9056  drm/panel: fix a possible null pointer dereference
- !9054  soc: fsl: qbman: Use raw spinlock for cgr_lock
- !8939  clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- !8952  ACPI: video: check for error while searching for backlight device parent
- !8986 [sync] PR-8639:  s390/qeth: Fix kernel panic after setting hsuid
- Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- !8714  Fix page corruption caused by racy check in __free_pages
- ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9080  Bluetooth: L2CAP: Fix not validating setsockopt user input
- Bluetooth: L2CAP: Fix not validating setsockopt user input
- mm/dynamic_hugetlb: use rcu lock to protect hpool
- mm/dynamic_hugetlb: simplify the refcount code
- !9072 [sync] PR-9015:  CVE-2024-36953
- !9071 [sync] PR-9014:  drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr()
- KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id
- drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- Bluetooth: RFCOMM: Fix not validating setsockopt user input
- afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- !8947 [sync] PR-6800:  block: fix overflow in blk_ioctl_discard()
- !9052  CVE-2024-35796
- drm/panel: fix a possible null pointer dereference
- soc: fsl: qbman: Use raw spinlock for cgr_lock
- !9021  wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- net: ll_temac: platform_get_resource replaced by wrong function
- !9048  IB/hfi1: Restore allocated resources on failed copyout
- IB/hfi1: Restore allocated resources on failed copyout
- !9028  tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- !8830  Fix CVE-2024-35951
- !9009  fix CVE-2024-35839
- !9008  tipc: fix a possible memleak in tipc_buf_append
- !8721  CVE-2024-35887
- !8876  drm/vmwgfx: Fix invalid reads in fence signaled events
- !8884  scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- !8922  hugetlbfs: fix hugetlbfs_statfs() locking
- bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- netfilter: bridge: replace physindev with physinif in nf_bridge_info
- netfilter: propagate net to nf_bridge_get_physindev
- netfilter: nfnetlink_log: use proper helper for fetching physinif
- !8662  usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group
- tipc: fix a possible memleak in tipc_buf_append
- !8617 [sync] PR-8472:  fix CVE-2024-27415
- !8983  fix CVE-2024-36905
- scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- s390/qeth: Fix kernel panic after setting hsuid
- net: relax socket state check at accept time.
- tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets
- virtio-blk: fix implicit overflow on virtio_max_dma_size
- mmc: mmc_spi: fix error handling in mmc_spi_probe()
- ACPI: video: check for error while searching for backlight device parent
- block: fix overflow in blk_ioctl_discard()
- clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- ceph: blocklist the kclient when receiving corrupted snap trace
- ceph: shut down access to inode when async create fails
- ceph: refactor remove_session_caps_cb
- ceph: fix auth cap handling logic in remove_session_caps_cb
- ceph: drop private list from remove_session_caps_cb
- pipe: wakeup wr_wait after setting max_usage
- fs/pipe: move check to pipe_has_watch_queue()
- hugetlbfs: fix hugetlbfs_statfs() locking
- scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- drm/vmwgfx: Fix invalid reads in fence signaled events
- drm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr()
- drm/panfrost: Fix the panfrost_mmu_map_fault_addr() error path
- batman-adv: Avoid infinite loop trying to resize local TT
- ax25: fix use-after-free bugs caused by ax25_ds_del_timer
- Fix page corruption caused by racy check in __free_pages
- wifi: cfg80211: check A-MSDU format more carefully
- usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group
- netfilter: br_netfilter: skip conntrack input hook for promisc packets
- netfilter: bridge: confirm multicast packets before passing them up the stack
- rpmsg: virtio: Free driver_override when rpmsg_remove()
- net/smc: Fix possible access to freed memory in link clear</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.80.0.161" date="1718884800">- Add the pub key in openEuler RPM-PGP certificate</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.81.0.162" date="1719403200">- !8104 [sync] PR-7886:  drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- !9443  net/mlx5: Discard command completions in internal error
- !9448  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9432  hid: cp2112: Fix duplicate workqueue initialization
- !9424  ASoC: SOF: Fix DSP oops stack dump output contents
- !9418 [sync] PR-6683: v2  CVE-2024-26921
- !9296  CVE-2021-47599
- !9403  Fix CVE-2024-31076
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- !9198  init/main.c: Fix potential static_command_line memory overflow
- hid: cp2112: Fix duplicate workqueue initialization
- ASoC: SOF: Fix DSP oops stack dump output contents
- !6742 [sync] PR-6654:  net/ipv6: avoid possible UAF in ip6_route_mpath_notify()
- sk_buff: Fix KABI break for the modification of struct sk_buff
- inet: inet_defrag: prevent sk release while still in use
- net: Fix KABI break for introducing is_skb_wmem()
- skb_expand_head() adjust skb-&gt;truesize incorrectly
- skbuff: introduce skb_expand_head()
- !9349  powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9396  RDMA/hns: Fix deadlock on SRQ async events.
- !9353 [sync] PR-9305:  CVE-2024-26661 following bugfix
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- !9359  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9379  RDMA/hns: Fix UAF for cq async event
- !9291  net: bridge: xmit: make sure we have at least eth header len bytes
- RDMA/hns: Fix deadlock on SRQ async events.
- !9049 [sync] PR-8774:  CVE-2024-36914
- !9263  ring-buffer: Fix a race between readers and resize checks
- RDMA/hns: Fix UAF for cq async event
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- Revert "drm/amd/display: Fix &amp;&amp; vs || typos"
- powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9272  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9274  wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- !9281  drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- !9279  net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- !9213 [sync] PR-9112:  Backport some optimizing patches for kunpeng920
- !9106  ksmbd: no response from compound read
- !9185  spi: Fix deadlock when adding SPI controllers on SPI buses
- net: bridge: xmit: make sure we have at least eth header len bytes
- drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- ring-buffer: Fix a race between readers and resize checks
- !9181  wifi: wilc1000: fix RCU usage in connect path
- !9214  drm/amd/display: Fix division by zero in setup_dsc_config
- !7541 [sync] PR-6801:  block: fix discard
- !9142 v2  CVE-2023-52810
- !8460 [sync] PR-8069:  CVE-2021-47427
- !9155  fix CVE-2023-52791
- !9169  UBIFS: fixes a series of issues that caused by power cut
- !9003  media: tc358743: register v4l2 async device only after successful setup
- !9088  fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Fix division by zero in setup_dsc_config
- arm64: syscall: unmask DAIF for tracing status
- arm64: Snapshot thread flags
- sched: Snapshot thread flags
- entry: Snapshot thread flags
- x86: Snapshot thread flags
- thread_info: Add helpers to snapshot thread flags
- irqchip/gic-v3: Use dsb(ishst) to order writes with ICC_SGI1R_EL1 accesses
- sched/fair: Optimize test_idle_cores() for !SMT
- init/main.c: Fix potential static_command_line memory overflow
- spi: fix kabi breakage in struct spi_controller
- spi: fix use-after-free of the add_lock mutex
- spi: Fix deadlock when adding SPI controllers on SPI buses
- wifi: wilc1000: fix RCU usage in connect path
- ubifs: dbg_orphan_check: Fix missed key type checking
- ubifs: Fix unattached inode when powercut happens in creating
- ubifs: Fix space leak when powercut happens in linking tmpfile
- ubifs: Move ui-&gt;data initialization after initializing security
- ubifs: Fix adding orphan entry twice for the same inode
- ubifs: Remove insert_dead_orphan from replaying orphan process
- ubifs: Don't add xattr inode into orphan area
- ubifs: Fix unattached xattr inode if powercut happens after deleting
- ubifs: Fix some kernel-doc comments
- ubifs: Fix spelling mistakes
- i2c: core: Fix atomic xfer check for non-preempt config
- i2c: core: Run atomic i2c xfer when !preemptible
- fs/jfs: Add check for negative db_l2nbperpage
- jfs: jfs_dmap: Validate db_l2nbperpage while mounting
- ksmbd: no response from compound read
- fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Skip on writeback when it's not applicable
- media: tc358743: register v4l2 async device only after successful setup
- scsi: iscsi: Fix iscsi_task use after free
- scsi: iscsi: Have abort handler get ref to conn
- drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- block: check io size before submit discard
- block: fix overflow in blk_ioctl_discard()
- net/ipv6: avoid possible UAF in ip6_route_mpath_notify()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.82.0.163" date="1719403201">- !9461 [sync] PR-5860:  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9197  scsi: core: Fix unremoved procfs host directory regression
- !9203  dyndbg: fix old BUG_ON in &gt;control parser
- !9195  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9200  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9189  clk: Fix clk_core_get NULL dereference
- !9187  net: phy: fix phy_get_internal_delay accessing an empty array
- !9460 v2  CVE-2024-27032
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- scsi: core: Fix unremoved procfs host directory regression
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.83.0.164" date="1720008000">- !9159  xfs: don't use current-&gt;journal_info
- !9659  fix uaf when proc_cpuset_show
- !9574 [sync] PR-8683: v4  Fix CVE-2024-35879
- !9531  CVE-2024-37356
- !9650  RDMA/hns: Modify the print level of CQE error
- !9495  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- RDMA/hns: Modify the print level of CQE error
- !9515  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9604 [sync] PR-9595:  drm/arm/malidp: fix a possible null pointer dereference
- !9603 [sync] PR-9593:  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9602 [sync] PR-9504:  um: Add winch to winch_handlers before registering winch IRQ
- !9601  CVE-2024-38597
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- um: Add winch to winch_handlers before registering winch IRQ
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9575 [sync] PR-9321:  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9586 [sync] PR-9284:  of: module: add buffer overflow check in of_modalias()
- !9589  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- of: module: add buffer overflow check in of_modalias()
- !9541  net/mlx5e: Avoid field-overflowing memcpy()
- !9480  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9579 [sync] PR-9558:  CVE-2024-39362
- !8565 [sync] PR-8240: v2  dmaengine: idxd: Fix oops during rmmod on single-CPU platforms
- !9545  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9576 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9384  serial: max3100: Update uart_driver_registered on driver removal
- !9564  fs/ntfs3: Check 'folio' pointer for NULL
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- drm/amd/display: Fix potential index out of bounds in color transformation function
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()
- !9484  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9529  media: lgdt3306a: Add a check against null-pointer-def
- fs/ntfs3: Check 'folio' pointer for NULL
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- !9375  ALSA: core: Fix NULL module pointer assignment at card init
- !9468  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9458  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- !9431  CVE-2022-48703
- !9364  fs/ntfs3: Use variable length array instead of fixed size
- media: lgdt3306a: Add a check against null-pointer-def
- !9411  kprobes: Fix possible use-after-free issue on kprobe registration
- !8743  ext4 bugfix from mainline
- !9498  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9397 [sync] PR-9350:  tracing: Fix permissions for the buffer_percent file
- !9334  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8712  ubifs: Set page uptodate in the correct place
- !9259  Fix CVE-2024-38588
- !9385  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9454  jffs2: prevent xattr node from overflowing the eraseblock
- !9328  CVE-2024-38596
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- kprobes: Fix possible use-after-free issue on kprobe registration
- tracing: Fix permissions for the buffer_percent file
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- af_unix: Fix data-races around sk-&gt;sk_shutdown.
- af_unix: Fix data races around sk-&gt;sk_shutdown.
- ftrace: Fix possible use-after-free issue in ftrace_location()
- ftrace: Fix possible warning on checking all pages used in ftrace_process_locs()
- ftrace: Store the order of pages allocated in ftrace_page
- xfs: don't use current-&gt;journal_info
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- ubifs: Set page uptodate in the correct place
- dmaengine: idxd: Fix oops during rmmod on single-CPU platforms</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.84.0.165" date="1720612800">- !9852  net/sched: act_skbmod: prevent kernel-infoleak
- !9854  nilfs2: fix use-after-free of timer for log writer thread
- !9855 [sync] PR-8096:  Fix CVE-2024-35988
- !9469 [sync] PR-8098:  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !9833  mmc: davinci: Don't strip remove function when driver is builtin
- !9847 [sync] PR-9500:  netfilter: nf_tables: flush pending destroy work before exit_net release
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- netfilter: nf_tables: flush pending destroy work before exit_net release
- mmc: davinci: Don't strip remove function when driver is builtin
- !9651  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9818  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9806  CVE-2024-36478
- !9773  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- null_blk: Move driver into its own directory
- !9794  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9790  clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- !9661 v3  Fix CVE-2024-38567
- !9552  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9767  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9769  iomap: Don't finish dio under irq when there exists pages
- !9774  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- !9733  drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9718  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9762  CVE-2024-26816
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9717  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- !9702  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9738  CVE-2024-38621
- !9673  ax25: Fix reference count leak issue of net_device
- !9734  net/9p: fix uninit-value in p9_client_rpc()
- !9740  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9739  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- media: stk1160: fix bounds checking in stk1160_copy_video()
- net/9p: fix uninit-value in p9_client_rpc()
- drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- !9722  ext4: delete redundant uptodate
- ext4: delete redundant uptodate check for buffer
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9641  CVE-2024-38582
- !9663  tls: fix missing memory barrier in tls_init
- !9656 v2  CVE-2024-38586
- !9685  greybus: lights: check return of get_channel_from_mode
- !9671  crypto: bcm - Fix pointer arithmetic
- !9635  fix CVE-2022-48721
- greybus: lights: check return of get_channel_from_mode
- ax25: Fix reference count leak issue of net_device
- crypto: bcm - Fix pointer arithmetic
- tls: fix missing memory barrier in tls_init
- wifi: carl9170: add a proper sanity check for endpoints
- USB: core: Add routines for endpoint checks in old drivers
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- net/smc: Fix slab-out-of-bounds issue in fallback
- net/smc: Only save the original clcsock callback functions
- net/smc: Avoid overwriting the copies of clcsock callback functions
- net/smc: Forward wakeup to smc socket waitqueue after fallback
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.85.0.166" date="1721217600">- !10068 [sync] PR-9984:  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !10032  ipv6: prevent possible NULL dereference in rt6_probe()
- !10063  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9991  netpoll: Fix race condition in netpoll_owner_active
- !10043  lib/generic-radix-tree.c: Don't overflow in peek()
- !9951  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9981  CVE-2024-40972
- !9995  Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- !9846 v2  CVE-2024-38598
- !9907  sock_map: avoid race between sock_map_close and sk_psock_put
- !9927  ocfs2: fix races between hole punching and AIO+DIO
- !9912  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9947  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9969 v2  netfilter: nft_set_pipapo: do not free live element
- !9980  Fix CVE-2023-52781
- !9954  drm/komeda: check for error-valued pointer
- !9923  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- netpoll: Fix race condition in netpoll_owner_active
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- ext4: remove duplicate definition of ext4_xattr_ibody_inline_set()
- usb: config: fix iteration issue in 'usb_get_bos_descriptor()'
- USB: core: Change configuration warnings to notices
- netfilter: nft_set_pipapo: do not free live element
- !9869  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9906  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9894  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9828  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9826  smb: client: fix potential deadlock when releasing mids
- !9890  ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9822 [sync] PR-9712:  fix CVE-2024-38540
- !9823 [sync] PR-9711:  fix CVE-2024-38615
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9840  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9873  CVE-2024-38570
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9636  ice: Do not use WQ_MEM_RECLAIM flag for workqueue
- !9747  CVE-2024-39469
- !9844  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- ice: Do not use WQ_MEM_RECLAIM flag for workqueue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.86.0.167" date="1721822400">- !10283 v2  CVE-2022-48816
- !9781  ksmbd: fix wrong DataOffset validation of create context
- !10301 v2  usb-storage: alauda: Check whether the media is initialized
- !10297  CVE-2023-52679
- usb-storage: alauda: Check whether the media is initialized
- !10263  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- of: unittest: Fix compile in the non-dynamic case
- of: unittest: Fix of_count_phandle_with_args() expected value message
- of: Fix double free in of_parse_phandle_with_args_map
- !10225  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10244  Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10230  ima: Fix use-after-free on a dentry's dname.name
- !10235  ima: Avoid blocking in RCU read-side critical section
- !10234  fix CVE-2024-41007
- !10201  net: dsa: seville: register the mdiobus under devres
- !10267  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !10256  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !9918  powerpc/pseries: Enforce hcall result buffer validity and size
- !10223  CVE-2024-35931
- !10085  nfs: Ensure that the NFS client returns a correct writeback error code
- ima: Avoid blocking in RCU read-side critical section
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- net: tcp: fix unexcepted socket die when snd_wnd is 0
- !10181 [sync] PR-9836:  fpga: manager: add owner module and take its refcount
- !10221  bpf: Fix overrunning reservations in ringbuf
- ima: Fix use-after-free on a dentry's dname.name
- !10200  dma-mapping: benchmark: fix node id validation
- !10209  drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10020  drm/exynos/vidi: fix memory leak in .get_modes()
- scsi: ufs: Fix a deadlock in the error handler
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- bpf: Fix overrunning reservations in ringbuf
- drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10136  ALSA: timer: Set lower bound of start tick time
- !10105  ecryptfs: Fix buffer size for tag 66 packet
- net: dsa: seville: register the mdiobus under devres
- dma-mapping: benchmark: fix node id validation
- !10140 [sync] PR-10095:  CVE-2024-40968
- !10108  tracing: Build event generation tests only as modules
- !10157 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10008  xfs: fix mount hung while sb recover fail
- fpga: manager: add owner module and take its refcount
- !10164  drop_monitor: replace spin_lock by raw_spin_lock
- !10163  RDMA/mlx5: Add check for srq max_sge attribute
- !10049  tipc: force a dst refcount before doing decryption
- !10023  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10042  Fix CVE-2024-36939
- MIPS: Octeon: Add PCIe link status check
- !10129  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10119  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10080  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10053  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10089  fix CVE-2024-40995
- !9993  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9902  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10098 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9932  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- ksmbd: fix wrong DataOffset validation of create context</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.87.0.168" date="1722427200">- !10435  md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !8942 [sync] PR-8468: v2  CVE-2024-35808
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !10067  iommu: Return right value in iommu_sva_bind_device()
- !10335  fix CVE-2024-36479 for sp1
- !10365  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10213  net: mvpp2: clear BM pool before initialization
- !10212  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- !10396  BMA: Fix DMA reset problem and change the version number
- !10343  fix CVE-2024-27010
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !10367 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10322  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- net/sched: initialize noop_qdisc owner
- net/sched: fix kabi change in struct Qdisc
- net/sched: Fix mirred deadlock on device recursion
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- !9369  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10072  serial: imx: Introduce timeout when waiting on transmitter empty
- !9975  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10314 [sync] PR-10187:  fix CVE-2021-47205
- !10313 [sync] PR-10189:  fix CVE-2024-40915
- !10252  fbdev: savage: Handle err return when savagefb_check_var failed
- !10308  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10259  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- fbdev: savage: Handle err return when savagefb_check_var failed
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- md/dm-raid: don't clear MD_RECOVERY_FROZEN after setting frozen
- md/dm-raid: don't call md_reap_sync_thread() directly</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.88.0.169" date="1723032000">- !10769  CVE-2024-41027
- !10667 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10724  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10738  net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10744  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10758  Fix CVE-2024-42160
- !10531  ftruncate: pass a signed offset
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10581 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10718  CVE-2024-42101
- !10712  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10728  net/iucv: Avoid explicit cpumask var allocation on stack
- !10696 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10719  gve: Account for stopped queues when reading NIC stats
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10620  fix CVE-2024-42129
- !9680  drm: vc4: Fix possible null pointer dereference
- !10671 [sync] PR-10598:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- gve: Account for stopped queues when reading NIC stats
- !10588 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- nvmet: always initialize cqe.result
- !10682  ocfs2: fix DIO failure due to insufficient transaction credits
- !10567  gpio: davinci: Validate the obtained number of IRQs
- !10669  fix CVE-2024-42076
- !10662  fix CVE-2024-41062
- !10651  xfs: don't walk off the end of a directory data block
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10655  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10632  sched/deadline: Fix task_struct reference leak
- !10520  xfs: add bounds checking to xlog_recover_process_data
- ocfs2: fix DIO failure due to insufficient transaction credits
- !10390  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: can: j1939: Initialize unused data in j1939_send_one()
- can: j1939: j1939_send_one(): fix missing CAN header initialization
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10638  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10645  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10637  RDMA/restrack: Fix potential invalid address access
- !10647  net: dsa: mv88e6xxx: Correct check for empty list
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10619  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10558  CVE-2024-42105
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10602  ppp: reject claimed-as-LCP but actually malformed packets
- !10611  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10604  IB/core: Implement a limit on UMAD receive List
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- s390/pkey: Wipe copies of protected- and secure-keys
- !10553  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10537  CVE-2024-42082
- !10595  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10570  ila: block BH in ila_output()
- !10563  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10587  filelock: Fix fcntl/close race recovery compat path
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10542  tap: add missing verification for short frame
- !10535  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10550  backport serveral bugfixes from upstream
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10549  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10528  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10421  stm class: Fix a double free in stm_register_device()
- !10478  ALSA: emux: improve patch ioctl data validation
- !10247  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10543  tun: add missing verification for short frame
- !10469 [sync] PR-10342:  CVE-2024-39471
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10464  null_blk: fix validation of block size
- bpf, events: Use prog to emit ksymbol event for main program
- bpf, perf: Use subprog name when reporting subprog ksymbol
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- bpf: ensure main program has an extable
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- tun: add missing verification for short frame
- tap: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10477  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10468  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10455  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- xfs: add bounds checking to xlog_recover_process_data
- !10461  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10494  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10488  fix CVE-2024-42086
- !9937  media: gspca: cpia1: shift-out-of-bounds in set_flicker
- !9930  ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- !9934  selinux: avoid dereference of garbage after mount failure
- !10379  drm/radeon: fix UBSAN warning in kv_dpm.c
- !10423  kunit: Fix kthread reference
- !10422  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10362  PCI/ROM: Fix PCI ROM header check bug
- !10459  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10405  Fix CVE-2024-41069
- ALSA: emux: improve patch ioctl data validation
- jffs2: Fix potential illegal address access in jffs2_free_inode
- !10353  fix CVE-2024-40976
- !10272  HID: core: remove unnecessary WARN_ON() in implement()
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- !10430  s390/qeth: fix deadlock during failing recovery
- !10441  net/sched: Fix UAF when resolving a clash
- !10447  net: ena: Add validation for completion descriptors consistency
- !10426  net: stmmac: move the EST lock to struct stmmac_priv
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- HID: core: remove unnecessary WARN_ON() in implement()
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- media: gspca: cpia1: shift-out-of-bounds in set_flicker
- selinux: avoid dereference of garbage after mount failure
- ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- drm: vc4: Fix possible null pointer dereference</changelog>
</package>
<package pkgid="30053e13d403e685253297df1c3e30fd41a5a298986b6c36f0e91f9db948b108" name="kernel" arch="src">
  <version epoch="0" ver="5.10.0" rel="136.89.0.170.oe2203sp1"/>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.80.0.161" date="1718884800">- Add the pub key in openEuler RPM-PGP certificate</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.81.0.162" date="1719403200">- !8104 [sync] PR-7886:  drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- !9443  net/mlx5: Discard command completions in internal error
- !9448  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9432  hid: cp2112: Fix duplicate workqueue initialization
- !9424  ASoC: SOF: Fix DSP oops stack dump output contents
- !9418 [sync] PR-6683: v2  CVE-2024-26921
- !9296  CVE-2021-47599
- !9403  Fix CVE-2024-31076
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- !9198  init/main.c: Fix potential static_command_line memory overflow
- hid: cp2112: Fix duplicate workqueue initialization
- ASoC: SOF: Fix DSP oops stack dump output contents
- !6742 [sync] PR-6654:  net/ipv6: avoid possible UAF in ip6_route_mpath_notify()
- sk_buff: Fix KABI break for the modification of struct sk_buff
- inet: inet_defrag: prevent sk release while still in use
- net: Fix KABI break for introducing is_skb_wmem()
- skb_expand_head() adjust skb-&gt;truesize incorrectly
- skbuff: introduce skb_expand_head()
- !9349  powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9396  RDMA/hns: Fix deadlock on SRQ async events.
- !9353 [sync] PR-9305:  CVE-2024-26661 following bugfix
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- !9359  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9379  RDMA/hns: Fix UAF for cq async event
- !9291  net: bridge: xmit: make sure we have at least eth header len bytes
- RDMA/hns: Fix deadlock on SRQ async events.
- !9049 [sync] PR-8774:  CVE-2024-36914
- !9263  ring-buffer: Fix a race between readers and resize checks
- RDMA/hns: Fix UAF for cq async event
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- Revert "drm/amd/display: Fix &amp;&amp; vs || typos"
- powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9272  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9274  wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- !9281  drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- !9279  net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- !9213 [sync] PR-9112:  Backport some optimizing patches for kunpeng920
- !9106  ksmbd: no response from compound read
- !9185  spi: Fix deadlock when adding SPI controllers on SPI buses
- net: bridge: xmit: make sure we have at least eth header len bytes
- drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- ring-buffer: Fix a race between readers and resize checks
- !9181  wifi: wilc1000: fix RCU usage in connect path
- !9214  drm/amd/display: Fix division by zero in setup_dsc_config
- !7541 [sync] PR-6801:  block: fix discard
- !9142 v2  CVE-2023-52810
- !8460 [sync] PR-8069:  CVE-2021-47427
- !9155  fix CVE-2023-52791
- !9169  UBIFS: fixes a series of issues that caused by power cut
- !9003  media: tc358743: register v4l2 async device only after successful setup
- !9088  fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Fix division by zero in setup_dsc_config
- arm64: syscall: unmask DAIF for tracing status
- arm64: Snapshot thread flags
- sched: Snapshot thread flags
- entry: Snapshot thread flags
- x86: Snapshot thread flags
- thread_info: Add helpers to snapshot thread flags
- irqchip/gic-v3: Use dsb(ishst) to order writes with ICC_SGI1R_EL1 accesses
- sched/fair: Optimize test_idle_cores() for !SMT
- init/main.c: Fix potential static_command_line memory overflow
- spi: fix kabi breakage in struct spi_controller
- spi: fix use-after-free of the add_lock mutex
- spi: Fix deadlock when adding SPI controllers on SPI buses
- wifi: wilc1000: fix RCU usage in connect path
- ubifs: dbg_orphan_check: Fix missed key type checking
- ubifs: Fix unattached inode when powercut happens in creating
- ubifs: Fix space leak when powercut happens in linking tmpfile
- ubifs: Move ui-&gt;data initialization after initializing security
- ubifs: Fix adding orphan entry twice for the same inode
- ubifs: Remove insert_dead_orphan from replaying orphan process
- ubifs: Don't add xattr inode into orphan area
- ubifs: Fix unattached xattr inode if powercut happens after deleting
- ubifs: Fix some kernel-doc comments
- ubifs: Fix spelling mistakes
- i2c: core: Fix atomic xfer check for non-preempt config
- i2c: core: Run atomic i2c xfer when !preemptible
- fs/jfs: Add check for negative db_l2nbperpage
- jfs: jfs_dmap: Validate db_l2nbperpage while mounting
- ksmbd: no response from compound read
- fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Skip on writeback when it's not applicable
- media: tc358743: register v4l2 async device only after successful setup
- scsi: iscsi: Fix iscsi_task use after free
- scsi: iscsi: Have abort handler get ref to conn
- drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- block: check io size before submit discard
- block: fix overflow in blk_ioctl_discard()
- net/ipv6: avoid possible UAF in ip6_route_mpath_notify()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.82.0.163" date="1719403201">- !9461 [sync] PR-5860:  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9197  scsi: core: Fix unremoved procfs host directory regression
- !9203  dyndbg: fix old BUG_ON in &gt;control parser
- !9195  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9200  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9189  clk: Fix clk_core_get NULL dereference
- !9187  net: phy: fix phy_get_internal_delay accessing an empty array
- !9460 v2  CVE-2024-27032
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- scsi: core: Fix unremoved procfs host directory regression
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.83.0.164" date="1720008000">- !9159  xfs: don't use current-&gt;journal_info
- !9659  fix uaf when proc_cpuset_show
- !9574 [sync] PR-8683: v4  Fix CVE-2024-35879
- !9531  CVE-2024-37356
- !9650  RDMA/hns: Modify the print level of CQE error
- !9495  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- RDMA/hns: Modify the print level of CQE error
- !9515  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9604 [sync] PR-9595:  drm/arm/malidp: fix a possible null pointer dereference
- !9603 [sync] PR-9593:  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9602 [sync] PR-9504:  um: Add winch to winch_handlers before registering winch IRQ
- !9601  CVE-2024-38597
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- um: Add winch to winch_handlers before registering winch IRQ
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9575 [sync] PR-9321:  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9586 [sync] PR-9284:  of: module: add buffer overflow check in of_modalias()
- !9589  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- of: module: add buffer overflow check in of_modalias()
- !9541  net/mlx5e: Avoid field-overflowing memcpy()
- !9480  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9579 [sync] PR-9558:  CVE-2024-39362
- !8565 [sync] PR-8240: v2  dmaengine: idxd: Fix oops during rmmod on single-CPU platforms
- !9545  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9576 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9384  serial: max3100: Update uart_driver_registered on driver removal
- !9564  fs/ntfs3: Check 'folio' pointer for NULL
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- drm/amd/display: Fix potential index out of bounds in color transformation function
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()
- !9484  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9529  media: lgdt3306a: Add a check against null-pointer-def
- fs/ntfs3: Check 'folio' pointer for NULL
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- !9375  ALSA: core: Fix NULL module pointer assignment at card init
- !9468  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9458  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- !9431  CVE-2022-48703
- !9364  fs/ntfs3: Use variable length array instead of fixed size
- media: lgdt3306a: Add a check against null-pointer-def
- !9411  kprobes: Fix possible use-after-free issue on kprobe registration
- !8743  ext4 bugfix from mainline
- !9498  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9397 [sync] PR-9350:  tracing: Fix permissions for the buffer_percent file
- !9334  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8712  ubifs: Set page uptodate in the correct place
- !9259  Fix CVE-2024-38588
- !9385  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9454  jffs2: prevent xattr node from overflowing the eraseblock
- !9328  CVE-2024-38596
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- kprobes: Fix possible use-after-free issue on kprobe registration
- tracing: Fix permissions for the buffer_percent file
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- af_unix: Fix data-races around sk-&gt;sk_shutdown.
- af_unix: Fix data races around sk-&gt;sk_shutdown.
- ftrace: Fix possible use-after-free issue in ftrace_location()
- ftrace: Fix possible warning on checking all pages used in ftrace_process_locs()
- ftrace: Store the order of pages allocated in ftrace_page
- xfs: don't use current-&gt;journal_info
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- ubifs: Set page uptodate in the correct place
- dmaengine: idxd: Fix oops during rmmod on single-CPU platforms</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.84.0.165" date="1720612800">- !9852  net/sched: act_skbmod: prevent kernel-infoleak
- !9854  nilfs2: fix use-after-free of timer for log writer thread
- !9855 [sync] PR-8096:  Fix CVE-2024-35988
- !9469 [sync] PR-8098:  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !9833  mmc: davinci: Don't strip remove function when driver is builtin
- !9847 [sync] PR-9500:  netfilter: nf_tables: flush pending destroy work before exit_net release
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- netfilter: nf_tables: flush pending destroy work before exit_net release
- mmc: davinci: Don't strip remove function when driver is builtin
- !9651  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9818  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9806  CVE-2024-36478
- !9773  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- null_blk: Move driver into its own directory
- !9794  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9790  clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- !9661 v3  Fix CVE-2024-38567
- !9552  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9767  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9769  iomap: Don't finish dio under irq when there exists pages
- !9774  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- !9733  drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9718  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9762  CVE-2024-26816
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9717  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- !9702  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9738  CVE-2024-38621
- !9673  ax25: Fix reference count leak issue of net_device
- !9734  net/9p: fix uninit-value in p9_client_rpc()
- !9740  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9739  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- media: stk1160: fix bounds checking in stk1160_copy_video()
- net/9p: fix uninit-value in p9_client_rpc()
- drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- !9722  ext4: delete redundant uptodate
- ext4: delete redundant uptodate check for buffer
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9641  CVE-2024-38582
- !9663  tls: fix missing memory barrier in tls_init
- !9656 v2  CVE-2024-38586
- !9685  greybus: lights: check return of get_channel_from_mode
- !9671  crypto: bcm - Fix pointer arithmetic
- !9635  fix CVE-2022-48721
- greybus: lights: check return of get_channel_from_mode
- ax25: Fix reference count leak issue of net_device
- crypto: bcm - Fix pointer arithmetic
- tls: fix missing memory barrier in tls_init
- wifi: carl9170: add a proper sanity check for endpoints
- USB: core: Add routines for endpoint checks in old drivers
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- net/smc: Fix slab-out-of-bounds issue in fallback
- net/smc: Only save the original clcsock callback functions
- net/smc: Avoid overwriting the copies of clcsock callback functions
- net/smc: Forward wakeup to smc socket waitqueue after fallback
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.85.0.166" date="1721217600">- !10068 [sync] PR-9984:  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !10032  ipv6: prevent possible NULL dereference in rt6_probe()
- !10063  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9991  netpoll: Fix race condition in netpoll_owner_active
- !10043  lib/generic-radix-tree.c: Don't overflow in peek()
- !9951  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9981  CVE-2024-40972
- !9995  Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- !9846 v2  CVE-2024-38598
- !9907  sock_map: avoid race between sock_map_close and sk_psock_put
- !9927  ocfs2: fix races between hole punching and AIO+DIO
- !9912  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9947  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9969 v2  netfilter: nft_set_pipapo: do not free live element
- !9980  Fix CVE-2023-52781
- !9954  drm/komeda: check for error-valued pointer
- !9923  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- netpoll: Fix race condition in netpoll_owner_active
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- ext4: remove duplicate definition of ext4_xattr_ibody_inline_set()
- usb: config: fix iteration issue in 'usb_get_bos_descriptor()'
- USB: core: Change configuration warnings to notices
- netfilter: nft_set_pipapo: do not free live element
- !9869  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9906  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9894  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9828  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9826  smb: client: fix potential deadlock when releasing mids
- !9890  ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9822 [sync] PR-9712:  fix CVE-2024-38540
- !9823 [sync] PR-9711:  fix CVE-2024-38615
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9840  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9873  CVE-2024-38570
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9636  ice: Do not use WQ_MEM_RECLAIM flag for workqueue
- !9747  CVE-2024-39469
- !9844  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- ice: Do not use WQ_MEM_RECLAIM flag for workqueue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.86.0.167" date="1721822400">- !10283 v2  CVE-2022-48816
- !9781  ksmbd: fix wrong DataOffset validation of create context
- !10301 v2  usb-storage: alauda: Check whether the media is initialized
- !10297  CVE-2023-52679
- usb-storage: alauda: Check whether the media is initialized
- !10263  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- of: unittest: Fix compile in the non-dynamic case
- of: unittest: Fix of_count_phandle_with_args() expected value message
- of: Fix double free in of_parse_phandle_with_args_map
- !10225  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10244  Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10230  ima: Fix use-after-free on a dentry's dname.name
- !10235  ima: Avoid blocking in RCU read-side critical section
- !10234  fix CVE-2024-41007
- !10201  net: dsa: seville: register the mdiobus under devres
- !10267  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !10256  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !9918  powerpc/pseries: Enforce hcall result buffer validity and size
- !10223  CVE-2024-35931
- !10085  nfs: Ensure that the NFS client returns a correct writeback error code
- ima: Avoid blocking in RCU read-side critical section
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- net: tcp: fix unexcepted socket die when snd_wnd is 0
- !10181 [sync] PR-9836:  fpga: manager: add owner module and take its refcount
- !10221  bpf: Fix overrunning reservations in ringbuf
- ima: Fix use-after-free on a dentry's dname.name
- !10200  dma-mapping: benchmark: fix node id validation
- !10209  drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10020  drm/exynos/vidi: fix memory leak in .get_modes()
- scsi: ufs: Fix a deadlock in the error handler
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- bpf: Fix overrunning reservations in ringbuf
- drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10136  ALSA: timer: Set lower bound of start tick time
- !10105  ecryptfs: Fix buffer size for tag 66 packet
- net: dsa: seville: register the mdiobus under devres
- dma-mapping: benchmark: fix node id validation
- !10140 [sync] PR-10095:  CVE-2024-40968
- !10108  tracing: Build event generation tests only as modules
- !10157 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10008  xfs: fix mount hung while sb recover fail
- fpga: manager: add owner module and take its refcount
- !10164  drop_monitor: replace spin_lock by raw_spin_lock
- !10163  RDMA/mlx5: Add check for srq max_sge attribute
- !10049  tipc: force a dst refcount before doing decryption
- !10023  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10042  Fix CVE-2024-36939
- MIPS: Octeon: Add PCIe link status check
- !10129  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10119  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10080  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10053  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10089  fix CVE-2024-40995
- !9993  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9902  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10098 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9932  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- ksmbd: fix wrong DataOffset validation of create context</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.87.0.168" date="1722427200">- !10435  md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !8942 [sync] PR-8468: v2  CVE-2024-35808
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !10067  iommu: Return right value in iommu_sva_bind_device()
- !10335  fix CVE-2024-36479 for sp1
- !10365  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10213  net: mvpp2: clear BM pool before initialization
- !10212  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- !10396  BMA: Fix DMA reset problem and change the version number
- !10343  fix CVE-2024-27010
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !10367 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10322  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- net/sched: initialize noop_qdisc owner
- net/sched: fix kabi change in struct Qdisc
- net/sched: Fix mirred deadlock on device recursion
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- !9369  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10072  serial: imx: Introduce timeout when waiting on transmitter empty
- !9975  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10314 [sync] PR-10187:  fix CVE-2021-47205
- !10313 [sync] PR-10189:  fix CVE-2024-40915
- !10252  fbdev: savage: Handle err return when savagefb_check_var failed
- !10308  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10259  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- fbdev: savage: Handle err return when savagefb_check_var failed
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- md/dm-raid: don't clear MD_RECOVERY_FROZEN after setting frozen
- md/dm-raid: don't call md_reap_sync_thread() directly</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.88.0.169" date="1723032000">- !10769  CVE-2024-41027
- !10667 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10724  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10738  net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10744  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10758  Fix CVE-2024-42160
- !10531  ftruncate: pass a signed offset
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10581 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10718  CVE-2024-42101
- !10712  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10728  net/iucv: Avoid explicit cpumask var allocation on stack
- !10696 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10719  gve: Account for stopped queues when reading NIC stats
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10620  fix CVE-2024-42129
- !9680  drm: vc4: Fix possible null pointer dereference
- !10671 [sync] PR-10598:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- gve: Account for stopped queues when reading NIC stats
- !10588 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- nvmet: always initialize cqe.result
- !10682  ocfs2: fix DIO failure due to insufficient transaction credits
- !10567  gpio: davinci: Validate the obtained number of IRQs
- !10669  fix CVE-2024-42076
- !10662  fix CVE-2024-41062
- !10651  xfs: don't walk off the end of a directory data block
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10655  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10632  sched/deadline: Fix task_struct reference leak
- !10520  xfs: add bounds checking to xlog_recover_process_data
- ocfs2: fix DIO failure due to insufficient transaction credits
- !10390  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: can: j1939: Initialize unused data in j1939_send_one()
- can: j1939: j1939_send_one(): fix missing CAN header initialization
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10638  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10645  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10637  RDMA/restrack: Fix potential invalid address access
- !10647  net: dsa: mv88e6xxx: Correct check for empty list
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10619  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10558  CVE-2024-42105
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10602  ppp: reject claimed-as-LCP but actually malformed packets
- !10611  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10604  IB/core: Implement a limit on UMAD receive List
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- s390/pkey: Wipe copies of protected- and secure-keys
- !10553  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10537  CVE-2024-42082
- !10595  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10570  ila: block BH in ila_output()
- !10563  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10587  filelock: Fix fcntl/close race recovery compat path
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10542  tap: add missing verification for short frame
- !10535  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10550  backport serveral bugfixes from upstream
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10549  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10528  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10421  stm class: Fix a double free in stm_register_device()
- !10478  ALSA: emux: improve patch ioctl data validation
- !10247  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10543  tun: add missing verification for short frame
- !10469 [sync] PR-10342:  CVE-2024-39471
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10464  null_blk: fix validation of block size
- bpf, events: Use prog to emit ksymbol event for main program
- bpf, perf: Use subprog name when reporting subprog ksymbol
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- bpf: ensure main program has an extable
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- tun: add missing verification for short frame
- tap: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10477  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10468  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10455  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- xfs: add bounds checking to xlog_recover_process_data
- !10461  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10494  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10488  fix CVE-2024-42086
- !9937  media: gspca: cpia1: shift-out-of-bounds in set_flicker
- !9930  ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- !9934  selinux: avoid dereference of garbage after mount failure
- !10379  drm/radeon: fix UBSAN warning in kv_dpm.c
- !10423  kunit: Fix kthread reference
- !10422  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10362  PCI/ROM: Fix PCI ROM header check bug
- !10459  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10405  Fix CVE-2024-41069
- ALSA: emux: improve patch ioctl data validation
- jffs2: Fix potential illegal address access in jffs2_free_inode
- !10353  fix CVE-2024-40976
- !10272  HID: core: remove unnecessary WARN_ON() in implement()
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- !10430  s390/qeth: fix deadlock during failing recovery
- !10441  net/sched: Fix UAF when resolving a clash
- !10447  net: ena: Add validation for completion descriptors consistency
- !10426  net: stmmac: move the EST lock to struct stmmac_priv
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- HID: core: remove unnecessary WARN_ON() in implement()
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- media: gspca: cpia1: shift-out-of-bounds in set_flicker
- selinux: avoid dereference of garbage after mount failure
- ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.89.0.170" date="1723636800">- !10881  orangefs: fix out-of-bounds fsid access
- !10880  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10879  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10884  crypto: aead,cipher - zeroize key buffer after use
- !10889  s390/pkey: Wipe copies of clear-key structures on failure
- !10822  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10844  netfilter: nf_tables: prefer nft_chain_validate
- !10868 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10874  USB: serial: mos7840: fix crash on resume
- s390/pkey: Wipe copies of clear-key structures on failure
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10829  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10867 [sync] PR-10817:  media: dvb-frontends: tda10048: Fix integer overflow
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- media: dvb-frontends: tda10048: Fix integer overflow
- !10864 v3  ext4: flexibly control whether to enable dioread_nolock by default
- !10850  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10617  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10830  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10828  fix CVE-2024-42095
- !10705  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10837  wifi: mt76: replace skb_put with skb_put_zero
- !10840  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- !10815  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10811  tcp_metrics: validate source addr length
- !10809  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10751  btrfs: qgroup: fix quota root leak after quota disable failure
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10782  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10734  filelock: Remove locks reliably when fcntl/close race is detected
- !10804 [sync] PR-10761:  leds: an30259a: Use devm_mutex_init() for mutex initialization
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10680  crypto: ecdh - explicitly zeroize private_key
- !10791 [sync] PR-10787:  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10779  Fix CVE-2021-47582
- !10780  crypto: hisilicon/sec - Fix memory leak for sec resource release
- !10783  s390/pkey: Wipe sensitive data on failure
- NFSD: Fix the behavior of READ near OFFSET_MAX
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- crypto: hisilicon/sec - Fix memory leak for sec resource release
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor</changelog>
</package>
<package pkgid="e803688719b7b73cb58f6c31d581d98383370748780efd5109b121ca1409fa9b" name="kernel" arch="src">
  <version epoch="0" ver="5.10.0" rel="136.90.0.171.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.81.0.162" date="1719403200">- !8104 [sync] PR-7886:  drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- !9443  net/mlx5: Discard command completions in internal error
- !9448  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9432  hid: cp2112: Fix duplicate workqueue initialization
- !9424  ASoC: SOF: Fix DSP oops stack dump output contents
- !9418 [sync] PR-6683: v2  CVE-2024-26921
- !9296  CVE-2021-47599
- !9403  Fix CVE-2024-31076
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- !9198  init/main.c: Fix potential static_command_line memory overflow
- hid: cp2112: Fix duplicate workqueue initialization
- ASoC: SOF: Fix DSP oops stack dump output contents
- !6742 [sync] PR-6654:  net/ipv6: avoid possible UAF in ip6_route_mpath_notify()
- sk_buff: Fix KABI break for the modification of struct sk_buff
- inet: inet_defrag: prevent sk release while still in use
- net: Fix KABI break for introducing is_skb_wmem()
- skb_expand_head() adjust skb-&gt;truesize incorrectly
- skbuff: introduce skb_expand_head()
- !9349  powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9396  RDMA/hns: Fix deadlock on SRQ async events.
- !9353 [sync] PR-9305:  CVE-2024-26661 following bugfix
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- !9359  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9379  RDMA/hns: Fix UAF for cq async event
- !9291  net: bridge: xmit: make sure we have at least eth header len bytes
- RDMA/hns: Fix deadlock on SRQ async events.
- !9049 [sync] PR-8774:  CVE-2024-36914
- !9263  ring-buffer: Fix a race between readers and resize checks
- RDMA/hns: Fix UAF for cq async event
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- Revert "drm/amd/display: Fix &amp;&amp; vs || typos"
- powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9272  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9274  wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- !9281  drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- !9279  net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- !9213 [sync] PR-9112:  Backport some optimizing patches for kunpeng920
- !9106  ksmbd: no response from compound read
- !9185  spi: Fix deadlock when adding SPI controllers on SPI buses
- net: bridge: xmit: make sure we have at least eth header len bytes
- drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- ring-buffer: Fix a race between readers and resize checks
- !9181  wifi: wilc1000: fix RCU usage in connect path
- !9214  drm/amd/display: Fix division by zero in setup_dsc_config
- !7541 [sync] PR-6801:  block: fix discard
- !9142 v2  CVE-2023-52810
- !8460 [sync] PR-8069:  CVE-2021-47427
- !9155  fix CVE-2023-52791
- !9169  UBIFS: fixes a series of issues that caused by power cut
- !9003  media: tc358743: register v4l2 async device only after successful setup
- !9088  fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Fix division by zero in setup_dsc_config
- arm64: syscall: unmask DAIF for tracing status
- arm64: Snapshot thread flags
- sched: Snapshot thread flags
- entry: Snapshot thread flags
- x86: Snapshot thread flags
- thread_info: Add helpers to snapshot thread flags
- irqchip/gic-v3: Use dsb(ishst) to order writes with ICC_SGI1R_EL1 accesses
- sched/fair: Optimize test_idle_cores() for !SMT
- init/main.c: Fix potential static_command_line memory overflow
- spi: fix kabi breakage in struct spi_controller
- spi: fix use-after-free of the add_lock mutex
- spi: Fix deadlock when adding SPI controllers on SPI buses
- wifi: wilc1000: fix RCU usage in connect path
- ubifs: dbg_orphan_check: Fix missed key type checking
- ubifs: Fix unattached inode when powercut happens in creating
- ubifs: Fix space leak when powercut happens in linking tmpfile
- ubifs: Move ui-&gt;data initialization after initializing security
- ubifs: Fix adding orphan entry twice for the same inode
- ubifs: Remove insert_dead_orphan from replaying orphan process
- ubifs: Don't add xattr inode into orphan area
- ubifs: Fix unattached xattr inode if powercut happens after deleting
- ubifs: Fix some kernel-doc comments
- ubifs: Fix spelling mistakes
- i2c: core: Fix atomic xfer check for non-preempt config
- i2c: core: Run atomic i2c xfer when !preemptible
- fs/jfs: Add check for negative db_l2nbperpage
- jfs: jfs_dmap: Validate db_l2nbperpage while mounting
- ksmbd: no response from compound read
- fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Skip on writeback when it's not applicable
- media: tc358743: register v4l2 async device only after successful setup
- scsi: iscsi: Fix iscsi_task use after free
- scsi: iscsi: Have abort handler get ref to conn
- drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- block: check io size before submit discard
- block: fix overflow in blk_ioctl_discard()
- net/ipv6: avoid possible UAF in ip6_route_mpath_notify()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.82.0.163" date="1719403201">- !9461 [sync] PR-5860:  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9197  scsi: core: Fix unremoved procfs host directory regression
- !9203  dyndbg: fix old BUG_ON in &gt;control parser
- !9195  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9200  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9189  clk: Fix clk_core_get NULL dereference
- !9187  net: phy: fix phy_get_internal_delay accessing an empty array
- !9460 v2  CVE-2024-27032
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- scsi: core: Fix unremoved procfs host directory regression
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.83.0.164" date="1720008000">- !9159  xfs: don't use current-&gt;journal_info
- !9659  fix uaf when proc_cpuset_show
- !9574 [sync] PR-8683: v4  Fix CVE-2024-35879
- !9531  CVE-2024-37356
- !9650  RDMA/hns: Modify the print level of CQE error
- !9495  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- RDMA/hns: Modify the print level of CQE error
- !9515  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9604 [sync] PR-9595:  drm/arm/malidp: fix a possible null pointer dereference
- !9603 [sync] PR-9593:  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9602 [sync] PR-9504:  um: Add winch to winch_handlers before registering winch IRQ
- !9601  CVE-2024-38597
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- um: Add winch to winch_handlers before registering winch IRQ
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9575 [sync] PR-9321:  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9586 [sync] PR-9284:  of: module: add buffer overflow check in of_modalias()
- !9589  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- of: module: add buffer overflow check in of_modalias()
- !9541  net/mlx5e: Avoid field-overflowing memcpy()
- !9480  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9579 [sync] PR-9558:  CVE-2024-39362
- !8565 [sync] PR-8240: v2  dmaengine: idxd: Fix oops during rmmod on single-CPU platforms
- !9545  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9576 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9384  serial: max3100: Update uart_driver_registered on driver removal
- !9564  fs/ntfs3: Check 'folio' pointer for NULL
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- drm/amd/display: Fix potential index out of bounds in color transformation function
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()
- !9484  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9529  media: lgdt3306a: Add a check against null-pointer-def
- fs/ntfs3: Check 'folio' pointer for NULL
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- !9375  ALSA: core: Fix NULL module pointer assignment at card init
- !9468  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9458  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- !9431  CVE-2022-48703
- !9364  fs/ntfs3: Use variable length array instead of fixed size
- media: lgdt3306a: Add a check against null-pointer-def
- !9411  kprobes: Fix possible use-after-free issue on kprobe registration
- !8743  ext4 bugfix from mainline
- !9498  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9397 [sync] PR-9350:  tracing: Fix permissions for the buffer_percent file
- !9334  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8712  ubifs: Set page uptodate in the correct place
- !9259  Fix CVE-2024-38588
- !9385  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9454  jffs2: prevent xattr node from overflowing the eraseblock
- !9328  CVE-2024-38596
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- kprobes: Fix possible use-after-free issue on kprobe registration
- tracing: Fix permissions for the buffer_percent file
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- af_unix: Fix data-races around sk-&gt;sk_shutdown.
- af_unix: Fix data races around sk-&gt;sk_shutdown.
- ftrace: Fix possible use-after-free issue in ftrace_location()
- ftrace: Fix possible warning on checking all pages used in ftrace_process_locs()
- ftrace: Store the order of pages allocated in ftrace_page
- xfs: don't use current-&gt;journal_info
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- ubifs: Set page uptodate in the correct place
- dmaengine: idxd: Fix oops during rmmod on single-CPU platforms</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.84.0.165" date="1720612800">- !9852  net/sched: act_skbmod: prevent kernel-infoleak
- !9854  nilfs2: fix use-after-free of timer for log writer thread
- !9855 [sync] PR-8096:  Fix CVE-2024-35988
- !9469 [sync] PR-8098:  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !9833  mmc: davinci: Don't strip remove function when driver is builtin
- !9847 [sync] PR-9500:  netfilter: nf_tables: flush pending destroy work before exit_net release
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- netfilter: nf_tables: flush pending destroy work before exit_net release
- mmc: davinci: Don't strip remove function when driver is builtin
- !9651  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9818  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9806  CVE-2024-36478
- !9773  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- null_blk: Move driver into its own directory
- !9794  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9790  clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- !9661 v3  Fix CVE-2024-38567
- !9552  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9767  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9769  iomap: Don't finish dio under irq when there exists pages
- !9774  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- !9733  drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9718  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9762  CVE-2024-26816
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9717  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- !9702  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9738  CVE-2024-38621
- !9673  ax25: Fix reference count leak issue of net_device
- !9734  net/9p: fix uninit-value in p9_client_rpc()
- !9740  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9739  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- media: stk1160: fix bounds checking in stk1160_copy_video()
- net/9p: fix uninit-value in p9_client_rpc()
- drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- !9722  ext4: delete redundant uptodate
- ext4: delete redundant uptodate check for buffer
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9641  CVE-2024-38582
- !9663  tls: fix missing memory barrier in tls_init
- !9656 v2  CVE-2024-38586
- !9685  greybus: lights: check return of get_channel_from_mode
- !9671  crypto: bcm - Fix pointer arithmetic
- !9635  fix CVE-2022-48721
- greybus: lights: check return of get_channel_from_mode
- ax25: Fix reference count leak issue of net_device
- crypto: bcm - Fix pointer arithmetic
- tls: fix missing memory barrier in tls_init
- wifi: carl9170: add a proper sanity check for endpoints
- USB: core: Add routines for endpoint checks in old drivers
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- net/smc: Fix slab-out-of-bounds issue in fallback
- net/smc: Only save the original clcsock callback functions
- net/smc: Avoid overwriting the copies of clcsock callback functions
- net/smc: Forward wakeup to smc socket waitqueue after fallback
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.85.0.166" date="1721217600">- !10068 [sync] PR-9984:  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !10032  ipv6: prevent possible NULL dereference in rt6_probe()
- !10063  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9991  netpoll: Fix race condition in netpoll_owner_active
- !10043  lib/generic-radix-tree.c: Don't overflow in peek()
- !9951  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9981  CVE-2024-40972
- !9995  Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- !9846 v2  CVE-2024-38598
- !9907  sock_map: avoid race between sock_map_close and sk_psock_put
- !9927  ocfs2: fix races between hole punching and AIO+DIO
- !9912  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9947  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9969 v2  netfilter: nft_set_pipapo: do not free live element
- !9980  Fix CVE-2023-52781
- !9954  drm/komeda: check for error-valued pointer
- !9923  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- netpoll: Fix race condition in netpoll_owner_active
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- ext4: remove duplicate definition of ext4_xattr_ibody_inline_set()
- usb: config: fix iteration issue in 'usb_get_bos_descriptor()'
- USB: core: Change configuration warnings to notices
- netfilter: nft_set_pipapo: do not free live element
- !9869  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9906  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9894  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9828  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9826  smb: client: fix potential deadlock when releasing mids
- !9890  ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9822 [sync] PR-9712:  fix CVE-2024-38540
- !9823 [sync] PR-9711:  fix CVE-2024-38615
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9840  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9873  CVE-2024-38570
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9636  ice: Do not use WQ_MEM_RECLAIM flag for workqueue
- !9747  CVE-2024-39469
- !9844  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- ice: Do not use WQ_MEM_RECLAIM flag for workqueue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.86.0.167" date="1721822400">- !10283 v2  CVE-2022-48816
- !9781  ksmbd: fix wrong DataOffset validation of create context
- !10301 v2  usb-storage: alauda: Check whether the media is initialized
- !10297  CVE-2023-52679
- usb-storage: alauda: Check whether the media is initialized
- !10263  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- of: unittest: Fix compile in the non-dynamic case
- of: unittest: Fix of_count_phandle_with_args() expected value message
- of: Fix double free in of_parse_phandle_with_args_map
- !10225  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10244  Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10230  ima: Fix use-after-free on a dentry's dname.name
- !10235  ima: Avoid blocking in RCU read-side critical section
- !10234  fix CVE-2024-41007
- !10201  net: dsa: seville: register the mdiobus under devres
- !10267  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !10256  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !9918  powerpc/pseries: Enforce hcall result buffer validity and size
- !10223  CVE-2024-35931
- !10085  nfs: Ensure that the NFS client returns a correct writeback error code
- ima: Avoid blocking in RCU read-side critical section
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- net: tcp: fix unexcepted socket die when snd_wnd is 0
- !10181 [sync] PR-9836:  fpga: manager: add owner module and take its refcount
- !10221  bpf: Fix overrunning reservations in ringbuf
- ima: Fix use-after-free on a dentry's dname.name
- !10200  dma-mapping: benchmark: fix node id validation
- !10209  drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10020  drm/exynos/vidi: fix memory leak in .get_modes()
- scsi: ufs: Fix a deadlock in the error handler
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- bpf: Fix overrunning reservations in ringbuf
- drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10136  ALSA: timer: Set lower bound of start tick time
- !10105  ecryptfs: Fix buffer size for tag 66 packet
- net: dsa: seville: register the mdiobus under devres
- dma-mapping: benchmark: fix node id validation
- !10140 [sync] PR-10095:  CVE-2024-40968
- !10108  tracing: Build event generation tests only as modules
- !10157 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10008  xfs: fix mount hung while sb recover fail
- fpga: manager: add owner module and take its refcount
- !10164  drop_monitor: replace spin_lock by raw_spin_lock
- !10163  RDMA/mlx5: Add check for srq max_sge attribute
- !10049  tipc: force a dst refcount before doing decryption
- !10023  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10042  Fix CVE-2024-36939
- MIPS: Octeon: Add PCIe link status check
- !10129  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10119  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10080  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10053  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10089  fix CVE-2024-40995
- !9993  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9902  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10098 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9932  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- ksmbd: fix wrong DataOffset validation of create context</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.87.0.168" date="1722427200">- !10435  md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !8942 [sync] PR-8468: v2  CVE-2024-35808
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !10067  iommu: Return right value in iommu_sva_bind_device()
- !10335  fix CVE-2024-36479 for sp1
- !10365  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10213  net: mvpp2: clear BM pool before initialization
- !10212  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- !10396  BMA: Fix DMA reset problem and change the version number
- !10343  fix CVE-2024-27010
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !10367 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10322  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- net/sched: initialize noop_qdisc owner
- net/sched: fix kabi change in struct Qdisc
- net/sched: Fix mirred deadlock on device recursion
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- !9369  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10072  serial: imx: Introduce timeout when waiting on transmitter empty
- !9975  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10314 [sync] PR-10187:  fix CVE-2021-47205
- !10313 [sync] PR-10189:  fix CVE-2024-40915
- !10252  fbdev: savage: Handle err return when savagefb_check_var failed
- !10308  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10259  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- fbdev: savage: Handle err return when savagefb_check_var failed
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- md/dm-raid: don't clear MD_RECOVERY_FROZEN after setting frozen
- md/dm-raid: don't call md_reap_sync_thread() directly</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.88.0.169" date="1723032000">- !10769  CVE-2024-41027
- !10667 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10724  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10738  net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10744  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10758  Fix CVE-2024-42160
- !10531  ftruncate: pass a signed offset
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10581 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10718  CVE-2024-42101
- !10712  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10728  net/iucv: Avoid explicit cpumask var allocation on stack
- !10696 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10719  gve: Account for stopped queues when reading NIC stats
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10620  fix CVE-2024-42129
- !9680  drm: vc4: Fix possible null pointer dereference
- !10671 [sync] PR-10598:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- gve: Account for stopped queues when reading NIC stats
- !10588 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- nvmet: always initialize cqe.result
- !10682  ocfs2: fix DIO failure due to insufficient transaction credits
- !10567  gpio: davinci: Validate the obtained number of IRQs
- !10669  fix CVE-2024-42076
- !10662  fix CVE-2024-41062
- !10651  xfs: don't walk off the end of a directory data block
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10655  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10632  sched/deadline: Fix task_struct reference leak
- !10520  xfs: add bounds checking to xlog_recover_process_data
- ocfs2: fix DIO failure due to insufficient transaction credits
- !10390  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: can: j1939: Initialize unused data in j1939_send_one()
- can: j1939: j1939_send_one(): fix missing CAN header initialization
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10638  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10645  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10637  RDMA/restrack: Fix potential invalid address access
- !10647  net: dsa: mv88e6xxx: Correct check for empty list
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10619  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10558  CVE-2024-42105
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10602  ppp: reject claimed-as-LCP but actually malformed packets
- !10611  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10604  IB/core: Implement a limit on UMAD receive List
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- s390/pkey: Wipe copies of protected- and secure-keys
- !10553  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10537  CVE-2024-42082
- !10595  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10570  ila: block BH in ila_output()
- !10563  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10587  filelock: Fix fcntl/close race recovery compat path
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10542  tap: add missing verification for short frame
- !10535  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10550  backport serveral bugfixes from upstream
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10549  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10528  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10421  stm class: Fix a double free in stm_register_device()
- !10478  ALSA: emux: improve patch ioctl data validation
- !10247  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10543  tun: add missing verification for short frame
- !10469 [sync] PR-10342:  CVE-2024-39471
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10464  null_blk: fix validation of block size
- bpf, events: Use prog to emit ksymbol event for main program
- bpf, perf: Use subprog name when reporting subprog ksymbol
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- bpf: ensure main program has an extable
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- tun: add missing verification for short frame
- tap: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10477  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10468  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10455  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- xfs: add bounds checking to xlog_recover_process_data
- !10461  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10494  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10488  fix CVE-2024-42086
- !9937  media: gspca: cpia1: shift-out-of-bounds in set_flicker
- !9930  ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- !9934  selinux: avoid dereference of garbage after mount failure
- !10379  drm/radeon: fix UBSAN warning in kv_dpm.c
- !10423  kunit: Fix kthread reference
- !10422  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10362  PCI/ROM: Fix PCI ROM header check bug
- !10459  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10405  Fix CVE-2024-41069
- ALSA: emux: improve patch ioctl data validation
- jffs2: Fix potential illegal address access in jffs2_free_inode
- !10353  fix CVE-2024-40976
- !10272  HID: core: remove unnecessary WARN_ON() in implement()
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- !10430  s390/qeth: fix deadlock during failing recovery
- !10441  net/sched: Fix UAF when resolving a clash
- !10447  net: ena: Add validation for completion descriptors consistency
- !10426  net: stmmac: move the EST lock to struct stmmac_priv
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- HID: core: remove unnecessary WARN_ON() in implement()
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- media: gspca: cpia1: shift-out-of-bounds in set_flicker
- selinux: avoid dereference of garbage after mount failure
- ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.89.0.170" date="1723636800">- !10881  orangefs: fix out-of-bounds fsid access
- !10880  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10879  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10884  crypto: aead,cipher - zeroize key buffer after use
- !10889  s390/pkey: Wipe copies of clear-key structures on failure
- !10822  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10844  netfilter: nf_tables: prefer nft_chain_validate
- !10868 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10874  USB: serial: mos7840: fix crash on resume
- s390/pkey: Wipe copies of clear-key structures on failure
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10829  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10867 [sync] PR-10817:  media: dvb-frontends: tda10048: Fix integer overflow
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- media: dvb-frontends: tda10048: Fix integer overflow
- !10864 v3  ext4: flexibly control whether to enable dioread_nolock by default
- !10850  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10617  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10830  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10828  fix CVE-2024-42095
- !10705  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10837  wifi: mt76: replace skb_put with skb_put_zero
- !10840  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- !10815  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10811  tcp_metrics: validate source addr length
- !10809  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10751  btrfs: qgroup: fix quota root leak after quota disable failure
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10782  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10734  filelock: Remove locks reliably when fcntl/close race is detected
- !10804 [sync] PR-10761:  leds: an30259a: Use devm_mutex_init() for mutex initialization
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10680  crypto: ecdh - explicitly zeroize private_key
- !10791 [sync] PR-10787:  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10779  Fix CVE-2021-47582
- !10780  crypto: hisilicon/sec - Fix memory leak for sec resource release
- !10783  s390/pkey: Wipe sensitive data on failure
- NFSD: Fix the behavior of READ near OFFSET_MAX
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- crypto: hisilicon/sec - Fix memory leak for sec resource release
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.90.0.171" date="1724155200">- !10981 [sync] PR-10679:  ibmvnic: Add tx check to prevent skb leak
- !11009  mm: avoid overflows in dirty throttling logic
- !10980  CVE-2024-42304
- mm: avoid overflows in dirty throttling logic
- !10983  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10938  CVE-2023-52868
- !10959  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10613  can: mcp251xfd: fix infinite loop when xmit fails
- !10952  Fix CVE-2024-36880
- !10790 [sync] PR-10652:  nvme: avoid double free special payload
- !10789 [sync] PR-10624:  ata: libata-core: Fix double free on error
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ibmvnic: Add tx check to prevent skb leak
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10955  leds: trigger: Unregister sysfs attributes before calling deactivate()
- !10866 [sync] PR-10514:  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10932  drm/lima: fix shared irq handling on driver remove
- !10948  net: nexthop: Initialize all fields in dumped nexthops
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- !10929  libceph: fix race between delayed_work() and ceph_monc_stop()
- thermal: core: prevent potential string overflow
- drm/lima: fix shared irq handling on driver remove
- !10747  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10917  Fix CVE-2024-36031
- !10910  Fix CVE-2024-40966
- keys: Fix overwrite of key expiration on instantiation
- keys, dns: Fix size check of V1 server-list header
- keys, dns: Fix missing size check of V1 server-list header
- keys, dns: Allow key types (eg. DNS) to be reclaimed immediately on expiry
- !10916  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10848  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- nvme: avoid double free special payload
- ata: libata-core: Fix double free on error
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails</changelog>
</package>
<package pkgid="b49208b113212568af81209c310fa7bf4906211448ab3d2e3f9ad35b8636b908" name="kernel" arch="src">
  <version epoch="0" ver="5.10.0" rel="136.91.0.172.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.82.0.163" date="1719403200">- !9461 [sync] PR-5860:  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9197  scsi: core: Fix unremoved procfs host directory regression
- !9203  dyndbg: fix old BUG_ON in &gt;control parser
- !9195  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9200  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9189  clk: Fix clk_core_get NULL dereference
- !9187  net: phy: fix phy_get_internal_delay accessing an empty array
- !9460 v2  CVE-2024-27032
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- scsi: core: Fix unremoved procfs host directory regression
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.83.0.164" date="1720008000">- !9159  xfs: don't use current-&gt;journal_info
- !9659  fix uaf when proc_cpuset_show
- !9574 [sync] PR-8683: v4  Fix CVE-2024-35879
- !9531  CVE-2024-37356
- !9650  RDMA/hns: Modify the print level of CQE error
- !9495  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- RDMA/hns: Modify the print level of CQE error
- !9515  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9604 [sync] PR-9595:  drm/arm/malidp: fix a possible null pointer dereference
- !9603 [sync] PR-9593:  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9602 [sync] PR-9504:  um: Add winch to winch_handlers before registering winch IRQ
- !9601  CVE-2024-38597
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- um: Add winch to winch_handlers before registering winch IRQ
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9575 [sync] PR-9321:  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9586 [sync] PR-9284:  of: module: add buffer overflow check in of_modalias()
- !9589  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- of: module: add buffer overflow check in of_modalias()
- !9541  net/mlx5e: Avoid field-overflowing memcpy()
- !9480  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9579 [sync] PR-9558:  CVE-2024-39362
- !8565 [sync] PR-8240: v2  dmaengine: idxd: Fix oops during rmmod on single-CPU platforms
- !9545  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9576 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9384  serial: max3100: Update uart_driver_registered on driver removal
- !9564  fs/ntfs3: Check 'folio' pointer for NULL
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- drm/amd/display: Fix potential index out of bounds in color transformation function
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()
- !9484  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9529  media: lgdt3306a: Add a check against null-pointer-def
- fs/ntfs3: Check 'folio' pointer for NULL
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- !9375  ALSA: core: Fix NULL module pointer assignment at card init
- !9468  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9458  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- !9431  CVE-2022-48703
- !9364  fs/ntfs3: Use variable length array instead of fixed size
- media: lgdt3306a: Add a check against null-pointer-def
- !9411  kprobes: Fix possible use-after-free issue on kprobe registration
- !8743  ext4 bugfix from mainline
- !9498  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9397 [sync] PR-9350:  tracing: Fix permissions for the buffer_percent file
- !9334  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8712  ubifs: Set page uptodate in the correct place
- !9259  Fix CVE-2024-38588
- !9385  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9454  jffs2: prevent xattr node from overflowing the eraseblock
- !9328  CVE-2024-38596
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- kprobes: Fix possible use-after-free issue on kprobe registration
- tracing: Fix permissions for the buffer_percent file
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- af_unix: Fix data-races around sk-&gt;sk_shutdown.
- af_unix: Fix data races around sk-&gt;sk_shutdown.
- ftrace: Fix possible use-after-free issue in ftrace_location()
- ftrace: Fix possible warning on checking all pages used in ftrace_process_locs()
- ftrace: Store the order of pages allocated in ftrace_page
- xfs: don't use current-&gt;journal_info
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- ubifs: Set page uptodate in the correct place
- dmaengine: idxd: Fix oops during rmmod on single-CPU platforms</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.84.0.165" date="1720612800">- !9852  net/sched: act_skbmod: prevent kernel-infoleak
- !9854  nilfs2: fix use-after-free of timer for log writer thread
- !9855 [sync] PR-8096:  Fix CVE-2024-35988
- !9469 [sync] PR-8098:  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !9833  mmc: davinci: Don't strip remove function when driver is builtin
- !9847 [sync] PR-9500:  netfilter: nf_tables: flush pending destroy work before exit_net release
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- netfilter: nf_tables: flush pending destroy work before exit_net release
- mmc: davinci: Don't strip remove function when driver is builtin
- !9651  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9818  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9806  CVE-2024-36478
- !9773  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- null_blk: Move driver into its own directory
- !9794  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9790  clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- !9661 v3  Fix CVE-2024-38567
- !9552  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9767  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9769  iomap: Don't finish dio under irq when there exists pages
- !9774  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- !9733  drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9718  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9762  CVE-2024-26816
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9717  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- !9702  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9738  CVE-2024-38621
- !9673  ax25: Fix reference count leak issue of net_device
- !9734  net/9p: fix uninit-value in p9_client_rpc()
- !9740  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9739  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- media: stk1160: fix bounds checking in stk1160_copy_video()
- net/9p: fix uninit-value in p9_client_rpc()
- drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- !9722  ext4: delete redundant uptodate
- ext4: delete redundant uptodate check for buffer
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9641  CVE-2024-38582
- !9663  tls: fix missing memory barrier in tls_init
- !9656 v2  CVE-2024-38586
- !9685  greybus: lights: check return of get_channel_from_mode
- !9671  crypto: bcm - Fix pointer arithmetic
- !9635  fix CVE-2022-48721
- greybus: lights: check return of get_channel_from_mode
- ax25: Fix reference count leak issue of net_device
- crypto: bcm - Fix pointer arithmetic
- tls: fix missing memory barrier in tls_init
- wifi: carl9170: add a proper sanity check for endpoints
- USB: core: Add routines for endpoint checks in old drivers
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- net/smc: Fix slab-out-of-bounds issue in fallback
- net/smc: Only save the original clcsock callback functions
- net/smc: Avoid overwriting the copies of clcsock callback functions
- net/smc: Forward wakeup to smc socket waitqueue after fallback
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.85.0.166" date="1721217600">- !10068 [sync] PR-9984:  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !10032  ipv6: prevent possible NULL dereference in rt6_probe()
- !10063  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9991  netpoll: Fix race condition in netpoll_owner_active
- !10043  lib/generic-radix-tree.c: Don't overflow in peek()
- !9951  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9981  CVE-2024-40972
- !9995  Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- !9846 v2  CVE-2024-38598
- !9907  sock_map: avoid race between sock_map_close and sk_psock_put
- !9927  ocfs2: fix races between hole punching and AIO+DIO
- !9912  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9947  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9969 v2  netfilter: nft_set_pipapo: do not free live element
- !9980  Fix CVE-2023-52781
- !9954  drm/komeda: check for error-valued pointer
- !9923  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- netpoll: Fix race condition in netpoll_owner_active
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- ext4: remove duplicate definition of ext4_xattr_ibody_inline_set()
- usb: config: fix iteration issue in 'usb_get_bos_descriptor()'
- USB: core: Change configuration warnings to notices
- netfilter: nft_set_pipapo: do not free live element
- !9869  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9906  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9894  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9828  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9826  smb: client: fix potential deadlock when releasing mids
- !9890  ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9822 [sync] PR-9712:  fix CVE-2024-38540
- !9823 [sync] PR-9711:  fix CVE-2024-38615
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9840  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9873  CVE-2024-38570
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9636  ice: Do not use WQ_MEM_RECLAIM flag for workqueue
- !9747  CVE-2024-39469
- !9844  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- ice: Do not use WQ_MEM_RECLAIM flag for workqueue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.86.0.167" date="1721822400">- !10283 v2  CVE-2022-48816
- !9781  ksmbd: fix wrong DataOffset validation of create context
- !10301 v2  usb-storage: alauda: Check whether the media is initialized
- !10297  CVE-2023-52679
- usb-storage: alauda: Check whether the media is initialized
- !10263  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- of: unittest: Fix compile in the non-dynamic case
- of: unittest: Fix of_count_phandle_with_args() expected value message
- of: Fix double free in of_parse_phandle_with_args_map
- !10225  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10244  Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10230  ima: Fix use-after-free on a dentry's dname.name
- !10235  ima: Avoid blocking in RCU read-side critical section
- !10234  fix CVE-2024-41007
- !10201  net: dsa: seville: register the mdiobus under devres
- !10267  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !10256  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !9918  powerpc/pseries: Enforce hcall result buffer validity and size
- !10223  CVE-2024-35931
- !10085  nfs: Ensure that the NFS client returns a correct writeback error code
- ima: Avoid blocking in RCU read-side critical section
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- net: tcp: fix unexcepted socket die when snd_wnd is 0
- !10181 [sync] PR-9836:  fpga: manager: add owner module and take its refcount
- !10221  bpf: Fix overrunning reservations in ringbuf
- ima: Fix use-after-free on a dentry's dname.name
- !10200  dma-mapping: benchmark: fix node id validation
- !10209  drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10020  drm/exynos/vidi: fix memory leak in .get_modes()
- scsi: ufs: Fix a deadlock in the error handler
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- bpf: Fix overrunning reservations in ringbuf
- drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10136  ALSA: timer: Set lower bound of start tick time
- !10105  ecryptfs: Fix buffer size for tag 66 packet
- net: dsa: seville: register the mdiobus under devres
- dma-mapping: benchmark: fix node id validation
- !10140 [sync] PR-10095:  CVE-2024-40968
- !10108  tracing: Build event generation tests only as modules
- !10157 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10008  xfs: fix mount hung while sb recover fail
- fpga: manager: add owner module and take its refcount
- !10164  drop_monitor: replace spin_lock by raw_spin_lock
- !10163  RDMA/mlx5: Add check for srq max_sge attribute
- !10049  tipc: force a dst refcount before doing decryption
- !10023  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10042  Fix CVE-2024-36939
- MIPS: Octeon: Add PCIe link status check
- !10129  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10119  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10080  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10053  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10089  fix CVE-2024-40995
- !9993  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9902  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10098 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9932  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- ksmbd: fix wrong DataOffset validation of create context</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.87.0.168" date="1722427200">- !10435  md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !8942 [sync] PR-8468: v2  CVE-2024-35808
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !10067  iommu: Return right value in iommu_sva_bind_device()
- !10335  fix CVE-2024-36479 for sp1
- !10365  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10213  net: mvpp2: clear BM pool before initialization
- !10212  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- !10396  BMA: Fix DMA reset problem and change the version number
- !10343  fix CVE-2024-27010
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !10367 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10322  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- net/sched: initialize noop_qdisc owner
- net/sched: fix kabi change in struct Qdisc
- net/sched: Fix mirred deadlock on device recursion
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- !9369  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10072  serial: imx: Introduce timeout when waiting on transmitter empty
- !9975  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10314 [sync] PR-10187:  fix CVE-2021-47205
- !10313 [sync] PR-10189:  fix CVE-2024-40915
- !10252  fbdev: savage: Handle err return when savagefb_check_var failed
- !10308  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10259  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- fbdev: savage: Handle err return when savagefb_check_var failed
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- md/dm-raid: don't clear MD_RECOVERY_FROZEN after setting frozen
- md/dm-raid: don't call md_reap_sync_thread() directly</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.88.0.169" date="1723032000">- !10769  CVE-2024-41027
- !10667 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10724  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10738  net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10744  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10758  Fix CVE-2024-42160
- !10531  ftruncate: pass a signed offset
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10581 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10718  CVE-2024-42101
- !10712  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10728  net/iucv: Avoid explicit cpumask var allocation on stack
- !10696 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10719  gve: Account for stopped queues when reading NIC stats
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10620  fix CVE-2024-42129
- !9680  drm: vc4: Fix possible null pointer dereference
- !10671 [sync] PR-10598:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- gve: Account for stopped queues when reading NIC stats
- !10588 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- nvmet: always initialize cqe.result
- !10682  ocfs2: fix DIO failure due to insufficient transaction credits
- !10567  gpio: davinci: Validate the obtained number of IRQs
- !10669  fix CVE-2024-42076
- !10662  fix CVE-2024-41062
- !10651  xfs: don't walk off the end of a directory data block
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10655  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10632  sched/deadline: Fix task_struct reference leak
- !10520  xfs: add bounds checking to xlog_recover_process_data
- ocfs2: fix DIO failure due to insufficient transaction credits
- !10390  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: can: j1939: Initialize unused data in j1939_send_one()
- can: j1939: j1939_send_one(): fix missing CAN header initialization
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10638  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10645  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10637  RDMA/restrack: Fix potential invalid address access
- !10647  net: dsa: mv88e6xxx: Correct check for empty list
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10619  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10558  CVE-2024-42105
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10602  ppp: reject claimed-as-LCP but actually malformed packets
- !10611  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10604  IB/core: Implement a limit on UMAD receive List
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- s390/pkey: Wipe copies of protected- and secure-keys
- !10553  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10537  CVE-2024-42082
- !10595  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10570  ila: block BH in ila_output()
- !10563  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10587  filelock: Fix fcntl/close race recovery compat path
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10542  tap: add missing verification for short frame
- !10535  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10550  backport serveral bugfixes from upstream
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10549  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10528  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10421  stm class: Fix a double free in stm_register_device()
- !10478  ALSA: emux: improve patch ioctl data validation
- !10247  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10543  tun: add missing verification for short frame
- !10469 [sync] PR-10342:  CVE-2024-39471
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10464  null_blk: fix validation of block size
- bpf, events: Use prog to emit ksymbol event for main program
- bpf, perf: Use subprog name when reporting subprog ksymbol
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- bpf: ensure main program has an extable
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- tun: add missing verification for short frame
- tap: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10477  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10468  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10455  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- xfs: add bounds checking to xlog_recover_process_data
- !10461  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10494  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10488  fix CVE-2024-42086
- !9937  media: gspca: cpia1: shift-out-of-bounds in set_flicker
- !9930  ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- !9934  selinux: avoid dereference of garbage after mount failure
- !10379  drm/radeon: fix UBSAN warning in kv_dpm.c
- !10423  kunit: Fix kthread reference
- !10422  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10362  PCI/ROM: Fix PCI ROM header check bug
- !10459  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10405  Fix CVE-2024-41069
- ALSA: emux: improve patch ioctl data validation
- jffs2: Fix potential illegal address access in jffs2_free_inode
- !10353  fix CVE-2024-40976
- !10272  HID: core: remove unnecessary WARN_ON() in implement()
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- !10430  s390/qeth: fix deadlock during failing recovery
- !10441  net/sched: Fix UAF when resolving a clash
- !10447  net: ena: Add validation for completion descriptors consistency
- !10426  net: stmmac: move the EST lock to struct stmmac_priv
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- HID: core: remove unnecessary WARN_ON() in implement()
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- media: gspca: cpia1: shift-out-of-bounds in set_flicker
- selinux: avoid dereference of garbage after mount failure
- ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.89.0.170" date="1723636800">- !10881  orangefs: fix out-of-bounds fsid access
- !10880  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10879  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10884  crypto: aead,cipher - zeroize key buffer after use
- !10889  s390/pkey: Wipe copies of clear-key structures on failure
- !10822  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10844  netfilter: nf_tables: prefer nft_chain_validate
- !10868 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10874  USB: serial: mos7840: fix crash on resume
- s390/pkey: Wipe copies of clear-key structures on failure
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10829  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10867 [sync] PR-10817:  media: dvb-frontends: tda10048: Fix integer overflow
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- media: dvb-frontends: tda10048: Fix integer overflow
- !10864 v3  ext4: flexibly control whether to enable dioread_nolock by default
- !10850  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10617  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10830  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10828  fix CVE-2024-42095
- !10705  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10837  wifi: mt76: replace skb_put with skb_put_zero
- !10840  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- !10815  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10811  tcp_metrics: validate source addr length
- !10809  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10751  btrfs: qgroup: fix quota root leak after quota disable failure
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10782  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10734  filelock: Remove locks reliably when fcntl/close race is detected
- !10804 [sync] PR-10761:  leds: an30259a: Use devm_mutex_init() for mutex initialization
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10680  crypto: ecdh - explicitly zeroize private_key
- !10791 [sync] PR-10787:  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10779  Fix CVE-2021-47582
- !10780  crypto: hisilicon/sec - Fix memory leak for sec resource release
- !10783  s390/pkey: Wipe sensitive data on failure
- NFSD: Fix the behavior of READ near OFFSET_MAX
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- crypto: hisilicon/sec - Fix memory leak for sec resource release
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.90.0.171" date="1724155200">- !10981 [sync] PR-10679:  ibmvnic: Add tx check to prevent skb leak
- !11009  mm: avoid overflows in dirty throttling logic
- !10980  CVE-2024-42304
- mm: avoid overflows in dirty throttling logic
- !10983  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10938  CVE-2023-52868
- !10959  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10613  can: mcp251xfd: fix infinite loop when xmit fails
- !10952  Fix CVE-2024-36880
- !10790 [sync] PR-10652:  nvme: avoid double free special payload
- !10789 [sync] PR-10624:  ata: libata-core: Fix double free on error
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ibmvnic: Add tx check to prevent skb leak
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10955  leds: trigger: Unregister sysfs attributes before calling deactivate()
- !10866 [sync] PR-10514:  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10932  drm/lima: fix shared irq handling on driver remove
- !10948  net: nexthop: Initialize all fields in dumped nexthops
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- !10929  libceph: fix race between delayed_work() and ceph_monc_stop()
- thermal: core: prevent potential string overflow
- drm/lima: fix shared irq handling on driver remove
- !10747  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10917  Fix CVE-2024-36031
- !10910  Fix CVE-2024-40966
- keys: Fix overwrite of key expiration on instantiation
- keys, dns: Fix size check of V1 server-list header
- keys, dns: Fix missing size check of V1 server-list header
- keys, dns: Allow key types (eg. DNS) to be reclaimed immediately on expiry
- !10916  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10848  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- nvme: avoid double free special payload
- ata: libata-core: Fix double free on error
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.91.0.172" date="1724760000">- !11162  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11152  protect the fetch of -&gt;fd[fd
- !11096  usb: xhci: Check endpoint is valid before dereferencing it
- !11093  mISDN: Fix a use after free in hfcmulti_tx()
- !11146  drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11082  f2fs: fix to don't dirty inode for readonly filesystem
- !11097  io_uring: lock overflowing for IOPOLL
- !11124  Fix CVE-2023-52893
- !11139 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !11098  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11029  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- !11076  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11080  ixgbe: fix pci device refcount leak
- !11002  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10986  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11137  netfilter: nf_tables: unregister flowtable hooks on netns exit
- !11116  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11053  m68k: Fix spinlock race in kernel thread creation
- !11052  phonet: fix rtm_phonet_notify() skb allocation
- !11127  drm/amd/display: Check pipe offset before setting vblank
- !11120  misc: fastrpc: Don't remove map on creater_process and device_release
- netfilter: nf_tables: unregister flowtable hooks on netns exit
- drm/amd/display: Check pipe offset before setting vblank
- gsmi: fix null-deref in gsmi_get_variable
- !11090  net/mlx5: Always drain health in shutdown callback
- misc: fastrpc: Don't remove map on creater_process and device_release
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- io_uring: lock overflowing for IOPOLL
- usb: xhci: Check endpoint is valid before dereferencing it
- mISDN: Fix a use after free in hfcmulti_tx()
- !11066  xhci: Fix null pointer dereference when host dies
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- ixgbe: fix pci device refcount leak
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11073  drm/virtio: Fix GEM handle creation UAF
- drm/virtio: Fix GEM handle creation UAF
- !11046  bpf: Fix a segment issue when downgrading gso_size
- !11039  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- xhci: Fix null pointer dereference when host dies
- !11016 [sync] PR-10965:  perf: Optimize perf_pmu_migrate_context()
- m68k: Fix spinlock race in kernel thread creation
- phonet: fix rtm_phonet_notify() skb allocation
- !11000  media: venus: fix use after free in vdec_close
- !11024  drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- !11014  media: mediatek: vcodec: Handle invalid decoder vsi
- !10972  ext4: fix infinite loop when replaying fast_commit
- bpf: Fix a segment issue when downgrading gso_size
- !11031 [sync] PR-11006:  kvm: s390: Reject memory region operations for ucontrol VMs
- !10994  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- !11032 [sync] PR-10976:  CVE-2024-42126
- !10967  Revert "kbuild: fix false positive warning/error about missing libelf"
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- !10989  drm/amd/display: Add NULL pointer check for kzalloc
- !11020  net: usb: qmi_wwan: fix memory leak for not ip packets
- kvm: s390: Reject memory region operations for ucontrol VMs
- !10988  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10961  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- !10452 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !10996  CVE-2024-42290
- perf: Optimize perf_pmu_migrate_context()
- media: mediatek: vcodec: Handle invalid decoder vsi
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- drm/amd/display: Add NULL pointer check for kzalloc
- s390/sclp: Fix sclp_init() cleanup on failure
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- ext4: fix infinite loop when replaying fast_commit
- Revert "kbuild: fix false positive warning/error about missing libelf"
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- ipv6: sr: fix missing sk_buff release in seg6_input_core</changelog>
</package>
<package pkgid="374a3ef263b7b10dfb4ad196f78e660f327319c9166581ba5c260232308f3db2" name="kernel" arch="src">
  <version epoch="0" ver="5.10.0" rel="136.92.0.173.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.83.0.164" date="1720008000">- !9159  xfs: don't use current-&gt;journal_info
- !9659  fix uaf when proc_cpuset_show
- !9574 [sync] PR-8683: v4  Fix CVE-2024-35879
- !9531  CVE-2024-37356
- !9650  RDMA/hns: Modify the print level of CQE error
- !9495  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- RDMA/hns: Modify the print level of CQE error
- !9515  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9604 [sync] PR-9595:  drm/arm/malidp: fix a possible null pointer dereference
- !9603 [sync] PR-9593:  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9602 [sync] PR-9504:  um: Add winch to winch_handlers before registering winch IRQ
- !9601  CVE-2024-38597
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- um: Add winch to winch_handlers before registering winch IRQ
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9575 [sync] PR-9321:  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9586 [sync] PR-9284:  of: module: add buffer overflow check in of_modalias()
- !9589  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- of: module: add buffer overflow check in of_modalias()
- !9541  net/mlx5e: Avoid field-overflowing memcpy()
- !9480  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9579 [sync] PR-9558:  CVE-2024-39362
- !8565 [sync] PR-8240: v2  dmaengine: idxd: Fix oops during rmmod on single-CPU platforms
- !9545  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9576 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9384  serial: max3100: Update uart_driver_registered on driver removal
- !9564  fs/ntfs3: Check 'folio' pointer for NULL
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- drm/amd/display: Fix potential index out of bounds in color transformation function
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()
- !9484  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9529  media: lgdt3306a: Add a check against null-pointer-def
- fs/ntfs3: Check 'folio' pointer for NULL
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- !9375  ALSA: core: Fix NULL module pointer assignment at card init
- !9468  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9458  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- !9431  CVE-2022-48703
- !9364  fs/ntfs3: Use variable length array instead of fixed size
- media: lgdt3306a: Add a check against null-pointer-def
- !9411  kprobes: Fix possible use-after-free issue on kprobe registration
- !8743  ext4 bugfix from mainline
- !9498  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9397 [sync] PR-9350:  tracing: Fix permissions for the buffer_percent file
- !9334  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8712  ubifs: Set page uptodate in the correct place
- !9259  Fix CVE-2024-38588
- !9385  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9454  jffs2: prevent xattr node from overflowing the eraseblock
- !9328  CVE-2024-38596
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- kprobes: Fix possible use-after-free issue on kprobe registration
- tracing: Fix permissions for the buffer_percent file
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- af_unix: Fix data-races around sk-&gt;sk_shutdown.
- af_unix: Fix data races around sk-&gt;sk_shutdown.
- ftrace: Fix possible use-after-free issue in ftrace_location()
- ftrace: Fix possible warning on checking all pages used in ftrace_process_locs()
- ftrace: Store the order of pages allocated in ftrace_page
- xfs: don't use current-&gt;journal_info
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- ubifs: Set page uptodate in the correct place
- dmaengine: idxd: Fix oops during rmmod on single-CPU platforms</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.84.0.165" date="1720612800">- !9852  net/sched: act_skbmod: prevent kernel-infoleak
- !9854  nilfs2: fix use-after-free of timer for log writer thread
- !9855 [sync] PR-8096:  Fix CVE-2024-35988
- !9469 [sync] PR-8098:  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !9833  mmc: davinci: Don't strip remove function when driver is builtin
- !9847 [sync] PR-9500:  netfilter: nf_tables: flush pending destroy work before exit_net release
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- netfilter: nf_tables: flush pending destroy work before exit_net release
- mmc: davinci: Don't strip remove function when driver is builtin
- !9651  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9818  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9806  CVE-2024-36478
- !9773  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- null_blk: Move driver into its own directory
- !9794  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9790  clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- !9661 v3  Fix CVE-2024-38567
- !9552  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9767  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9769  iomap: Don't finish dio under irq when there exists pages
- !9774  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- !9733  drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9718  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9762  CVE-2024-26816
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9717  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- !9702  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9738  CVE-2024-38621
- !9673  ax25: Fix reference count leak issue of net_device
- !9734  net/9p: fix uninit-value in p9_client_rpc()
- !9740  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9739  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- media: stk1160: fix bounds checking in stk1160_copy_video()
- net/9p: fix uninit-value in p9_client_rpc()
- drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- !9722  ext4: delete redundant uptodate
- ext4: delete redundant uptodate check for buffer
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9641  CVE-2024-38582
- !9663  tls: fix missing memory barrier in tls_init
- !9656 v2  CVE-2024-38586
- !9685  greybus: lights: check return of get_channel_from_mode
- !9671  crypto: bcm - Fix pointer arithmetic
- !9635  fix CVE-2022-48721
- greybus: lights: check return of get_channel_from_mode
- ax25: Fix reference count leak issue of net_device
- crypto: bcm - Fix pointer arithmetic
- tls: fix missing memory barrier in tls_init
- wifi: carl9170: add a proper sanity check for endpoints
- USB: core: Add routines for endpoint checks in old drivers
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- net/smc: Fix slab-out-of-bounds issue in fallback
- net/smc: Only save the original clcsock callback functions
- net/smc: Avoid overwriting the copies of clcsock callback functions
- net/smc: Forward wakeup to smc socket waitqueue after fallback
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.85.0.166" date="1721217600">- !10068 [sync] PR-9984:  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !10032  ipv6: prevent possible NULL dereference in rt6_probe()
- !10063  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9991  netpoll: Fix race condition in netpoll_owner_active
- !10043  lib/generic-radix-tree.c: Don't overflow in peek()
- !9951  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9981  CVE-2024-40972
- !9995  Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- !9846 v2  CVE-2024-38598
- !9907  sock_map: avoid race between sock_map_close and sk_psock_put
- !9927  ocfs2: fix races between hole punching and AIO+DIO
- !9912  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9947  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9969 v2  netfilter: nft_set_pipapo: do not free live element
- !9980  Fix CVE-2023-52781
- !9954  drm/komeda: check for error-valued pointer
- !9923  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- netpoll: Fix race condition in netpoll_owner_active
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- ext4: remove duplicate definition of ext4_xattr_ibody_inline_set()
- usb: config: fix iteration issue in 'usb_get_bos_descriptor()'
- USB: core: Change configuration warnings to notices
- netfilter: nft_set_pipapo: do not free live element
- !9869  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9906  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9894  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9828  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9826  smb: client: fix potential deadlock when releasing mids
- !9890  ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9822 [sync] PR-9712:  fix CVE-2024-38540
- !9823 [sync] PR-9711:  fix CVE-2024-38615
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9840  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9873  CVE-2024-38570
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9636  ice: Do not use WQ_MEM_RECLAIM flag for workqueue
- !9747  CVE-2024-39469
- !9844  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- ice: Do not use WQ_MEM_RECLAIM flag for workqueue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.86.0.167" date="1721822400">- !10283 v2  CVE-2022-48816
- !9781  ksmbd: fix wrong DataOffset validation of create context
- !10301 v2  usb-storage: alauda: Check whether the media is initialized
- !10297  CVE-2023-52679
- usb-storage: alauda: Check whether the media is initialized
- !10263  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- of: unittest: Fix compile in the non-dynamic case
- of: unittest: Fix of_count_phandle_with_args() expected value message
- of: Fix double free in of_parse_phandle_with_args_map
- !10225  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10244  Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10230  ima: Fix use-after-free on a dentry's dname.name
- !10235  ima: Avoid blocking in RCU read-side critical section
- !10234  fix CVE-2024-41007
- !10201  net: dsa: seville: register the mdiobus under devres
- !10267  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !10256  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !9918  powerpc/pseries: Enforce hcall result buffer validity and size
- !10223  CVE-2024-35931
- !10085  nfs: Ensure that the NFS client returns a correct writeback error code
- ima: Avoid blocking in RCU read-side critical section
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- net: tcp: fix unexcepted socket die when snd_wnd is 0
- !10181 [sync] PR-9836:  fpga: manager: add owner module and take its refcount
- !10221  bpf: Fix overrunning reservations in ringbuf
- ima: Fix use-after-free on a dentry's dname.name
- !10200  dma-mapping: benchmark: fix node id validation
- !10209  drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10020  drm/exynos/vidi: fix memory leak in .get_modes()
- scsi: ufs: Fix a deadlock in the error handler
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- bpf: Fix overrunning reservations in ringbuf
- drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10136  ALSA: timer: Set lower bound of start tick time
- !10105  ecryptfs: Fix buffer size for tag 66 packet
- net: dsa: seville: register the mdiobus under devres
- dma-mapping: benchmark: fix node id validation
- !10140 [sync] PR-10095:  CVE-2024-40968
- !10108  tracing: Build event generation tests only as modules
- !10157 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10008  xfs: fix mount hung while sb recover fail
- fpga: manager: add owner module and take its refcount
- !10164  drop_monitor: replace spin_lock by raw_spin_lock
- !10163  RDMA/mlx5: Add check for srq max_sge attribute
- !10049  tipc: force a dst refcount before doing decryption
- !10023  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10042  Fix CVE-2024-36939
- MIPS: Octeon: Add PCIe link status check
- !10129  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10119  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10080  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10053  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10089  fix CVE-2024-40995
- !9993  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9902  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10098 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9932  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- ksmbd: fix wrong DataOffset validation of create context</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.87.0.168" date="1722427200">- !10435  md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !8942 [sync] PR-8468: v2  CVE-2024-35808
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !10067  iommu: Return right value in iommu_sva_bind_device()
- !10335  fix CVE-2024-36479 for sp1
- !10365  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10213  net: mvpp2: clear BM pool before initialization
- !10212  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- !10396  BMA: Fix DMA reset problem and change the version number
- !10343  fix CVE-2024-27010
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !10367 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10322  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- net/sched: initialize noop_qdisc owner
- net/sched: fix kabi change in struct Qdisc
- net/sched: Fix mirred deadlock on device recursion
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- !9369  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10072  serial: imx: Introduce timeout when waiting on transmitter empty
- !9975  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10314 [sync] PR-10187:  fix CVE-2021-47205
- !10313 [sync] PR-10189:  fix CVE-2024-40915
- !10252  fbdev: savage: Handle err return when savagefb_check_var failed
- !10308  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10259  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- fbdev: savage: Handle err return when savagefb_check_var failed
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- md/dm-raid: don't clear MD_RECOVERY_FROZEN after setting frozen
- md/dm-raid: don't call md_reap_sync_thread() directly</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.88.0.169" date="1723032000">- !10769  CVE-2024-41027
- !10667 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10724  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10738  net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10744  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10758  Fix CVE-2024-42160
- !10531  ftruncate: pass a signed offset
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10581 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10718  CVE-2024-42101
- !10712  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10728  net/iucv: Avoid explicit cpumask var allocation on stack
- !10696 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10719  gve: Account for stopped queues when reading NIC stats
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10620  fix CVE-2024-42129
- !9680  drm: vc4: Fix possible null pointer dereference
- !10671 [sync] PR-10598:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- gve: Account for stopped queues when reading NIC stats
- !10588 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- nvmet: always initialize cqe.result
- !10682  ocfs2: fix DIO failure due to insufficient transaction credits
- !10567  gpio: davinci: Validate the obtained number of IRQs
- !10669  fix CVE-2024-42076
- !10662  fix CVE-2024-41062
- !10651  xfs: don't walk off the end of a directory data block
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10655  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10632  sched/deadline: Fix task_struct reference leak
- !10520  xfs: add bounds checking to xlog_recover_process_data
- ocfs2: fix DIO failure due to insufficient transaction credits
- !10390  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: can: j1939: Initialize unused data in j1939_send_one()
- can: j1939: j1939_send_one(): fix missing CAN header initialization
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10638  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10645  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10637  RDMA/restrack: Fix potential invalid address access
- !10647  net: dsa: mv88e6xxx: Correct check for empty list
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10619  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10558  CVE-2024-42105
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10602  ppp: reject claimed-as-LCP but actually malformed packets
- !10611  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10604  IB/core: Implement a limit on UMAD receive List
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- s390/pkey: Wipe copies of protected- and secure-keys
- !10553  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10537  CVE-2024-42082
- !10595  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10570  ila: block BH in ila_output()
- !10563  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10587  filelock: Fix fcntl/close race recovery compat path
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10542  tap: add missing verification for short frame
- !10535  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10550  backport serveral bugfixes from upstream
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10549  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10528  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10421  stm class: Fix a double free in stm_register_device()
- !10478  ALSA: emux: improve patch ioctl data validation
- !10247  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10543  tun: add missing verification for short frame
- !10469 [sync] PR-10342:  CVE-2024-39471
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10464  null_blk: fix validation of block size
- bpf, events: Use prog to emit ksymbol event for main program
- bpf, perf: Use subprog name when reporting subprog ksymbol
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- bpf: ensure main program has an extable
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- tun: add missing verification for short frame
- tap: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10477  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10468  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10455  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- xfs: add bounds checking to xlog_recover_process_data
- !10461  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10494  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10488  fix CVE-2024-42086
- !9937  media: gspca: cpia1: shift-out-of-bounds in set_flicker
- !9930  ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- !9934  selinux: avoid dereference of garbage after mount failure
- !10379  drm/radeon: fix UBSAN warning in kv_dpm.c
- !10423  kunit: Fix kthread reference
- !10422  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10362  PCI/ROM: Fix PCI ROM header check bug
- !10459  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10405  Fix CVE-2024-41069
- ALSA: emux: improve patch ioctl data validation
- jffs2: Fix potential illegal address access in jffs2_free_inode
- !10353  fix CVE-2024-40976
- !10272  HID: core: remove unnecessary WARN_ON() in implement()
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- !10430  s390/qeth: fix deadlock during failing recovery
- !10441  net/sched: Fix UAF when resolving a clash
- !10447  net: ena: Add validation for completion descriptors consistency
- !10426  net: stmmac: move the EST lock to struct stmmac_priv
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- HID: core: remove unnecessary WARN_ON() in implement()
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- media: gspca: cpia1: shift-out-of-bounds in set_flicker
- selinux: avoid dereference of garbage after mount failure
- ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.89.0.170" date="1723636800">- !10881  orangefs: fix out-of-bounds fsid access
- !10880  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10879  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10884  crypto: aead,cipher - zeroize key buffer after use
- !10889  s390/pkey: Wipe copies of clear-key structures on failure
- !10822  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10844  netfilter: nf_tables: prefer nft_chain_validate
- !10868 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10874  USB: serial: mos7840: fix crash on resume
- s390/pkey: Wipe copies of clear-key structures on failure
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10829  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10867 [sync] PR-10817:  media: dvb-frontends: tda10048: Fix integer overflow
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- media: dvb-frontends: tda10048: Fix integer overflow
- !10864 v3  ext4: flexibly control whether to enable dioread_nolock by default
- !10850  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10617  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10830  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10828  fix CVE-2024-42095
- !10705  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10837  wifi: mt76: replace skb_put with skb_put_zero
- !10840  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- !10815  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10811  tcp_metrics: validate source addr length
- !10809  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10751  btrfs: qgroup: fix quota root leak after quota disable failure
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10782  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10734  filelock: Remove locks reliably when fcntl/close race is detected
- !10804 [sync] PR-10761:  leds: an30259a: Use devm_mutex_init() for mutex initialization
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10680  crypto: ecdh - explicitly zeroize private_key
- !10791 [sync] PR-10787:  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10779  Fix CVE-2021-47582
- !10780  crypto: hisilicon/sec - Fix memory leak for sec resource release
- !10783  s390/pkey: Wipe sensitive data on failure
- NFSD: Fix the behavior of READ near OFFSET_MAX
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- crypto: hisilicon/sec - Fix memory leak for sec resource release
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.90.0.171" date="1724155200">- !10981 [sync] PR-10679:  ibmvnic: Add tx check to prevent skb leak
- !11009  mm: avoid overflows in dirty throttling logic
- !10980  CVE-2024-42304
- mm: avoid overflows in dirty throttling logic
- !10983  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10938  CVE-2023-52868
- !10959  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10613  can: mcp251xfd: fix infinite loop when xmit fails
- !10952  Fix CVE-2024-36880
- !10790 [sync] PR-10652:  nvme: avoid double free special payload
- !10789 [sync] PR-10624:  ata: libata-core: Fix double free on error
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ibmvnic: Add tx check to prevent skb leak
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10955  leds: trigger: Unregister sysfs attributes before calling deactivate()
- !10866 [sync] PR-10514:  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10932  drm/lima: fix shared irq handling on driver remove
- !10948  net: nexthop: Initialize all fields in dumped nexthops
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- !10929  libceph: fix race between delayed_work() and ceph_monc_stop()
- thermal: core: prevent potential string overflow
- drm/lima: fix shared irq handling on driver remove
- !10747  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10917  Fix CVE-2024-36031
- !10910  Fix CVE-2024-40966
- keys: Fix overwrite of key expiration on instantiation
- keys, dns: Fix size check of V1 server-list header
- keys, dns: Fix missing size check of V1 server-list header
- keys, dns: Allow key types (eg. DNS) to be reclaimed immediately on expiry
- !10916  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10848  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- nvme: avoid double free special payload
- ata: libata-core: Fix double free on error
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.91.0.172" date="1724760000">- !11162  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11152  protect the fetch of -&gt;fd[fd
- !11096  usb: xhci: Check endpoint is valid before dereferencing it
- !11093  mISDN: Fix a use after free in hfcmulti_tx()
- !11146  drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11082  f2fs: fix to don't dirty inode for readonly filesystem
- !11097  io_uring: lock overflowing for IOPOLL
- !11124  Fix CVE-2023-52893
- !11139 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !11098  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11029  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- !11076  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11080  ixgbe: fix pci device refcount leak
- !11002  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10986  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11137  netfilter: nf_tables: unregister flowtable hooks on netns exit
- !11116  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11053  m68k: Fix spinlock race in kernel thread creation
- !11052  phonet: fix rtm_phonet_notify() skb allocation
- !11127  drm/amd/display: Check pipe offset before setting vblank
- !11120  misc: fastrpc: Don't remove map on creater_process and device_release
- netfilter: nf_tables: unregister flowtable hooks on netns exit
- drm/amd/display: Check pipe offset before setting vblank
- gsmi: fix null-deref in gsmi_get_variable
- !11090  net/mlx5: Always drain health in shutdown callback
- misc: fastrpc: Don't remove map on creater_process and device_release
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- io_uring: lock overflowing for IOPOLL
- usb: xhci: Check endpoint is valid before dereferencing it
- mISDN: Fix a use after free in hfcmulti_tx()
- !11066  xhci: Fix null pointer dereference when host dies
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- ixgbe: fix pci device refcount leak
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11073  drm/virtio: Fix GEM handle creation UAF
- drm/virtio: Fix GEM handle creation UAF
- !11046  bpf: Fix a segment issue when downgrading gso_size
- !11039  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- xhci: Fix null pointer dereference when host dies
- !11016 [sync] PR-10965:  perf: Optimize perf_pmu_migrate_context()
- m68k: Fix spinlock race in kernel thread creation
- phonet: fix rtm_phonet_notify() skb allocation
- !11000  media: venus: fix use after free in vdec_close
- !11024  drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- !11014  media: mediatek: vcodec: Handle invalid decoder vsi
- !10972  ext4: fix infinite loop when replaying fast_commit
- bpf: Fix a segment issue when downgrading gso_size
- !11031 [sync] PR-11006:  kvm: s390: Reject memory region operations for ucontrol VMs
- !10994  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- !11032 [sync] PR-10976:  CVE-2024-42126
- !10967  Revert "kbuild: fix false positive warning/error about missing libelf"
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- !10989  drm/amd/display: Add NULL pointer check for kzalloc
- !11020  net: usb: qmi_wwan: fix memory leak for not ip packets
- kvm: s390: Reject memory region operations for ucontrol VMs
- !10988  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10961  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- !10452 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !10996  CVE-2024-42290
- perf: Optimize perf_pmu_migrate_context()
- media: mediatek: vcodec: Handle invalid decoder vsi
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- drm/amd/display: Add NULL pointer check for kzalloc
- s390/sclp: Fix sclp_init() cleanup on failure
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- ext4: fix infinite loop when replaying fast_commit
- Revert "kbuild: fix false positive warning/error about missing libelf"
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- ipv6: sr: fix missing sk_buff release in seg6_input_core</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.92.0.173" date="1725451200">- !11373  xdp: fix invalid wait context of page_pool_destroy()
- !11369  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11362  kcm: Serialise kcm_sendmsg() for the same socket.
- !11353  regulator: da9211: Use irq handler when ready
- !11348 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11318  efi: fix NULL-deref in init error path
- !10997  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11285  fix CVE-2024-43905
- !11344  netfilter: ctnetlink: use helper function to calculate expect ID
- !11332  jbd2: avoid mount failed when commit block is partial submitted
- !11191  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11200  ibmvnic: don't release napi in __ibmvnic_open()
- !10750 v2  CVE-2024-41016
- !11195  tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- !11296  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11289  Add exception protection processing for vd in axi_chan_handle_err function
- !11312  nvme-fabrics: use reserved tag for reg read/write command
- !11311  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- regulator: da9211: Use irq handler when ready
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- jbd2: avoid mount failed when commit block is partial submitted
- efi: fix NULL-deref in init error path
- nvme-fabrics: use reserved tag for reg read/write command
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- !11059  drm/amdgpu: change vm-&gt;task_info handling
- !11056  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- !11281  misc: fastrpc: Fix use-after-free race condition for maps
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- Add exception protection processing for vd in axi_chan_handle_err function
- !11278  net/sched: act_mpls: Fix warning during failed attribute validation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11225  apparmor: Fix null pointer deref when receiving skb during sock creation
- misc: fastrpc: Fix use-after-free race condition for maps
- !11274  serial: core: check uartclk for zero to avoid divide by zero
- !11101  wifi: mac80211: sdata can be NULL during AMPDU start
- net/sched: act_mpls: Fix warning during failed attribute validation
- !11213  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11268  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11244 [sync] PR-11210:  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11253  CVE-2024-43892
- !11218  scsi: qla2xxx: validate nvme_local_port correctly
- !11180  block: initialize integrity buffer to zero before writing it to media
- !11112  sysctl: always initialize i_uid/i_gid
- !11166  f2fs: let's avoid panic if extent_tree is not created
- !11153  fix cve-2023-52896
- !11165  tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- memcg: protect concurrent access to mem_cgroup_idr
- !11232  Bluetooth: MGMT: Add error handling to pair_device()
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11172  tracing: Fix overflow in get_free_elt()
- !11212 [sync] PR-11123:  fix CVE-2024-42288
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- scsi: qla2xxx: validate nvme_local_port correctly
- !11161  usb: vhci-hcd: Do not drop references before new references are gained
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- scsi: qla2xxx: Fix for possible memory corruption
- !11148  powerpc/pseries: Fix scv instruction crash with kexec
- !11141  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- ibmvnic: don't release napi in __ibmvnic_open()
- tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- block: initialize integrity buffer to zero before writing it to media
- tracing: Fix overflow in get_free_elt()
- f2fs: let's avoid panic if extent_tree is not created
- tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- usb: vhci-hcd: Do not drop references before new references are gained
- btrfs: fix race between quota rescan and disable leading to NULL pointer deref
- btrfs: move QUOTA_ENABLED check to rescan_should_stop from btrfs_qgroup_rescan_worker
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- wifi: mac80211: sdata can be NULL during AMPDU start
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
</package>
<package pkgid="a1f148e1c31f8c34fd270bb818cbd7a6cd2cd9793cc9fcff101282e66e02843d" name="kernel" arch="src">
  <version epoch="0" ver="5.10.0" rel="136.93.0.174.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.84.0.165" date="1720612800">- !9852  net/sched: act_skbmod: prevent kernel-infoleak
- !9854  nilfs2: fix use-after-free of timer for log writer thread
- !9855 [sync] PR-8096:  Fix CVE-2024-35988
- !9469 [sync] PR-8098:  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !9833  mmc: davinci: Don't strip remove function when driver is builtin
- !9847 [sync] PR-9500:  netfilter: nf_tables: flush pending destroy work before exit_net release
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- netfilter: nf_tables: flush pending destroy work before exit_net release
- mmc: davinci: Don't strip remove function when driver is builtin
- !9651  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9818  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9806  CVE-2024-36478
- !9773  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- null_blk: Move driver into its own directory
- !9794  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9790  clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- !9661 v3  Fix CVE-2024-38567
- !9552  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9767  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9769  iomap: Don't finish dio under irq when there exists pages
- !9774  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- !9733  drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9718  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9762  CVE-2024-26816
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9717  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- !9702  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9738  CVE-2024-38621
- !9673  ax25: Fix reference count leak issue of net_device
- !9734  net/9p: fix uninit-value in p9_client_rpc()
- !9740  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9739  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- media: stk1160: fix bounds checking in stk1160_copy_video()
- net/9p: fix uninit-value in p9_client_rpc()
- drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- !9722  ext4: delete redundant uptodate
- ext4: delete redundant uptodate check for buffer
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9641  CVE-2024-38582
- !9663  tls: fix missing memory barrier in tls_init
- !9656 v2  CVE-2024-38586
- !9685  greybus: lights: check return of get_channel_from_mode
- !9671  crypto: bcm - Fix pointer arithmetic
- !9635  fix CVE-2022-48721
- greybus: lights: check return of get_channel_from_mode
- ax25: Fix reference count leak issue of net_device
- crypto: bcm - Fix pointer arithmetic
- tls: fix missing memory barrier in tls_init
- wifi: carl9170: add a proper sanity check for endpoints
- USB: core: Add routines for endpoint checks in old drivers
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- net/smc: Fix slab-out-of-bounds issue in fallback
- net/smc: Only save the original clcsock callback functions
- net/smc: Avoid overwriting the copies of clcsock callback functions
- net/smc: Forward wakeup to smc socket waitqueue after fallback
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.85.0.166" date="1721217600">- !10068 [sync] PR-9984:  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !10032  ipv6: prevent possible NULL dereference in rt6_probe()
- !10063  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9991  netpoll: Fix race condition in netpoll_owner_active
- !10043  lib/generic-radix-tree.c: Don't overflow in peek()
- !9951  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9981  CVE-2024-40972
- !9995  Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- !9846 v2  CVE-2024-38598
- !9907  sock_map: avoid race between sock_map_close and sk_psock_put
- !9927  ocfs2: fix races between hole punching and AIO+DIO
- !9912  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9947  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9969 v2  netfilter: nft_set_pipapo: do not free live element
- !9980  Fix CVE-2023-52781
- !9954  drm/komeda: check for error-valued pointer
- !9923  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- netpoll: Fix race condition in netpoll_owner_active
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- ext4: remove duplicate definition of ext4_xattr_ibody_inline_set()
- usb: config: fix iteration issue in 'usb_get_bos_descriptor()'
- USB: core: Change configuration warnings to notices
- netfilter: nft_set_pipapo: do not free live element
- !9869  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9906  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9894  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9828  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9826  smb: client: fix potential deadlock when releasing mids
- !9890  ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9822 [sync] PR-9712:  fix CVE-2024-38540
- !9823 [sync] PR-9711:  fix CVE-2024-38615
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9840  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9873  CVE-2024-38570
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9636  ice: Do not use WQ_MEM_RECLAIM flag for workqueue
- !9747  CVE-2024-39469
- !9844  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- ice: Do not use WQ_MEM_RECLAIM flag for workqueue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.86.0.167" date="1721822400">- !10283 v2  CVE-2022-48816
- !9781  ksmbd: fix wrong DataOffset validation of create context
- !10301 v2  usb-storage: alauda: Check whether the media is initialized
- !10297  CVE-2023-52679
- usb-storage: alauda: Check whether the media is initialized
- !10263  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- of: unittest: Fix compile in the non-dynamic case
- of: unittest: Fix of_count_phandle_with_args() expected value message
- of: Fix double free in of_parse_phandle_with_args_map
- !10225  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10244  Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10230  ima: Fix use-after-free on a dentry's dname.name
- !10235  ima: Avoid blocking in RCU read-side critical section
- !10234  fix CVE-2024-41007
- !10201  net: dsa: seville: register the mdiobus under devres
- !10267  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !10256  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !9918  powerpc/pseries: Enforce hcall result buffer validity and size
- !10223  CVE-2024-35931
- !10085  nfs: Ensure that the NFS client returns a correct writeback error code
- ima: Avoid blocking in RCU read-side critical section
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- net: tcp: fix unexcepted socket die when snd_wnd is 0
- !10181 [sync] PR-9836:  fpga: manager: add owner module and take its refcount
- !10221  bpf: Fix overrunning reservations in ringbuf
- ima: Fix use-after-free on a dentry's dname.name
- !10200  dma-mapping: benchmark: fix node id validation
- !10209  drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10020  drm/exynos/vidi: fix memory leak in .get_modes()
- scsi: ufs: Fix a deadlock in the error handler
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- bpf: Fix overrunning reservations in ringbuf
- drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10136  ALSA: timer: Set lower bound of start tick time
- !10105  ecryptfs: Fix buffer size for tag 66 packet
- net: dsa: seville: register the mdiobus under devres
- dma-mapping: benchmark: fix node id validation
- !10140 [sync] PR-10095:  CVE-2024-40968
- !10108  tracing: Build event generation tests only as modules
- !10157 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10008  xfs: fix mount hung while sb recover fail
- fpga: manager: add owner module and take its refcount
- !10164  drop_monitor: replace spin_lock by raw_spin_lock
- !10163  RDMA/mlx5: Add check for srq max_sge attribute
- !10049  tipc: force a dst refcount before doing decryption
- !10023  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10042  Fix CVE-2024-36939
- MIPS: Octeon: Add PCIe link status check
- !10129  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10119  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10080  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10053  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10089  fix CVE-2024-40995
- !9993  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9902  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10098 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9932  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- ksmbd: fix wrong DataOffset validation of create context</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.87.0.168" date="1722427200">- !10435  md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !8942 [sync] PR-8468: v2  CVE-2024-35808
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !10067  iommu: Return right value in iommu_sva_bind_device()
- !10335  fix CVE-2024-36479 for sp1
- !10365  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10213  net: mvpp2: clear BM pool before initialization
- !10212  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- !10396  BMA: Fix DMA reset problem and change the version number
- !10343  fix CVE-2024-27010
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !10367 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10322  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- net/sched: initialize noop_qdisc owner
- net/sched: fix kabi change in struct Qdisc
- net/sched: Fix mirred deadlock on device recursion
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- !9369  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10072  serial: imx: Introduce timeout when waiting on transmitter empty
- !9975  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10314 [sync] PR-10187:  fix CVE-2021-47205
- !10313 [sync] PR-10189:  fix CVE-2024-40915
- !10252  fbdev: savage: Handle err return when savagefb_check_var failed
- !10308  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10259  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- fbdev: savage: Handle err return when savagefb_check_var failed
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- md/dm-raid: don't clear MD_RECOVERY_FROZEN after setting frozen
- md/dm-raid: don't call md_reap_sync_thread() directly</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.88.0.169" date="1723032000">- !10769  CVE-2024-41027
- !10667 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10724  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10738  net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10744  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10758  Fix CVE-2024-42160
- !10531  ftruncate: pass a signed offset
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10581 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10718  CVE-2024-42101
- !10712  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10728  net/iucv: Avoid explicit cpumask var allocation on stack
- !10696 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10719  gve: Account for stopped queues when reading NIC stats
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10620  fix CVE-2024-42129
- !9680  drm: vc4: Fix possible null pointer dereference
- !10671 [sync] PR-10598:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- gve: Account for stopped queues when reading NIC stats
- !10588 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- nvmet: always initialize cqe.result
- !10682  ocfs2: fix DIO failure due to insufficient transaction credits
- !10567  gpio: davinci: Validate the obtained number of IRQs
- !10669  fix CVE-2024-42076
- !10662  fix CVE-2024-41062
- !10651  xfs: don't walk off the end of a directory data block
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10655  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10632  sched/deadline: Fix task_struct reference leak
- !10520  xfs: add bounds checking to xlog_recover_process_data
- ocfs2: fix DIO failure due to insufficient transaction credits
- !10390  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: can: j1939: Initialize unused data in j1939_send_one()
- can: j1939: j1939_send_one(): fix missing CAN header initialization
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10638  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10645  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10637  RDMA/restrack: Fix potential invalid address access
- !10647  net: dsa: mv88e6xxx: Correct check for empty list
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10619  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10558  CVE-2024-42105
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10602  ppp: reject claimed-as-LCP but actually malformed packets
- !10611  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10604  IB/core: Implement a limit on UMAD receive List
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- s390/pkey: Wipe copies of protected- and secure-keys
- !10553  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10537  CVE-2024-42082
- !10595  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10570  ila: block BH in ila_output()
- !10563  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10587  filelock: Fix fcntl/close race recovery compat path
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10542  tap: add missing verification for short frame
- !10535  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10550  backport serveral bugfixes from upstream
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10549  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10528  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10421  stm class: Fix a double free in stm_register_device()
- !10478  ALSA: emux: improve patch ioctl data validation
- !10247  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10543  tun: add missing verification for short frame
- !10469 [sync] PR-10342:  CVE-2024-39471
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10464  null_blk: fix validation of block size
- bpf, events: Use prog to emit ksymbol event for main program
- bpf, perf: Use subprog name when reporting subprog ksymbol
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- bpf: ensure main program has an extable
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- tun: add missing verification for short frame
- tap: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10477  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10468  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10455  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- xfs: add bounds checking to xlog_recover_process_data
- !10461  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10494  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10488  fix CVE-2024-42086
- !9937  media: gspca: cpia1: shift-out-of-bounds in set_flicker
- !9930  ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- !9934  selinux: avoid dereference of garbage after mount failure
- !10379  drm/radeon: fix UBSAN warning in kv_dpm.c
- !10423  kunit: Fix kthread reference
- !10422  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10362  PCI/ROM: Fix PCI ROM header check bug
- !10459  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10405  Fix CVE-2024-41069
- ALSA: emux: improve patch ioctl data validation
- jffs2: Fix potential illegal address access in jffs2_free_inode
- !10353  fix CVE-2024-40976
- !10272  HID: core: remove unnecessary WARN_ON() in implement()
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- !10430  s390/qeth: fix deadlock during failing recovery
- !10441  net/sched: Fix UAF when resolving a clash
- !10447  net: ena: Add validation for completion descriptors consistency
- !10426  net: stmmac: move the EST lock to struct stmmac_priv
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- HID: core: remove unnecessary WARN_ON() in implement()
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- media: gspca: cpia1: shift-out-of-bounds in set_flicker
- selinux: avoid dereference of garbage after mount failure
- ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.89.0.170" date="1723636800">- !10881  orangefs: fix out-of-bounds fsid access
- !10880  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10879  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10884  crypto: aead,cipher - zeroize key buffer after use
- !10889  s390/pkey: Wipe copies of clear-key structures on failure
- !10822  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10844  netfilter: nf_tables: prefer nft_chain_validate
- !10868 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10874  USB: serial: mos7840: fix crash on resume
- s390/pkey: Wipe copies of clear-key structures on failure
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10829  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10867 [sync] PR-10817:  media: dvb-frontends: tda10048: Fix integer overflow
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- media: dvb-frontends: tda10048: Fix integer overflow
- !10864 v3  ext4: flexibly control whether to enable dioread_nolock by default
- !10850  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10617  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10830  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10828  fix CVE-2024-42095
- !10705  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10837  wifi: mt76: replace skb_put with skb_put_zero
- !10840  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- !10815  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10811  tcp_metrics: validate source addr length
- !10809  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10751  btrfs: qgroup: fix quota root leak after quota disable failure
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10782  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10734  filelock: Remove locks reliably when fcntl/close race is detected
- !10804 [sync] PR-10761:  leds: an30259a: Use devm_mutex_init() for mutex initialization
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10680  crypto: ecdh - explicitly zeroize private_key
- !10791 [sync] PR-10787:  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10779  Fix CVE-2021-47582
- !10780  crypto: hisilicon/sec - Fix memory leak for sec resource release
- !10783  s390/pkey: Wipe sensitive data on failure
- NFSD: Fix the behavior of READ near OFFSET_MAX
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- crypto: hisilicon/sec - Fix memory leak for sec resource release
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.90.0.171" date="1724155200">- !10981 [sync] PR-10679:  ibmvnic: Add tx check to prevent skb leak
- !11009  mm: avoid overflows in dirty throttling logic
- !10980  CVE-2024-42304
- mm: avoid overflows in dirty throttling logic
- !10983  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10938  CVE-2023-52868
- !10959  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10613  can: mcp251xfd: fix infinite loop when xmit fails
- !10952  Fix CVE-2024-36880
- !10790 [sync] PR-10652:  nvme: avoid double free special payload
- !10789 [sync] PR-10624:  ata: libata-core: Fix double free on error
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ibmvnic: Add tx check to prevent skb leak
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10955  leds: trigger: Unregister sysfs attributes before calling deactivate()
- !10866 [sync] PR-10514:  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10932  drm/lima: fix shared irq handling on driver remove
- !10948  net: nexthop: Initialize all fields in dumped nexthops
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- !10929  libceph: fix race between delayed_work() and ceph_monc_stop()
- thermal: core: prevent potential string overflow
- drm/lima: fix shared irq handling on driver remove
- !10747  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10917  Fix CVE-2024-36031
- !10910  Fix CVE-2024-40966
- keys: Fix overwrite of key expiration on instantiation
- keys, dns: Fix size check of V1 server-list header
- keys, dns: Fix missing size check of V1 server-list header
- keys, dns: Allow key types (eg. DNS) to be reclaimed immediately on expiry
- !10916  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10848  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- nvme: avoid double free special payload
- ata: libata-core: Fix double free on error
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.91.0.172" date="1724760000">- !11162  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11152  protect the fetch of -&gt;fd[fd
- !11096  usb: xhci: Check endpoint is valid before dereferencing it
- !11093  mISDN: Fix a use after free in hfcmulti_tx()
- !11146  drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11082  f2fs: fix to don't dirty inode for readonly filesystem
- !11097  io_uring: lock overflowing for IOPOLL
- !11124  Fix CVE-2023-52893
- !11139 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !11098  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11029  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- !11076  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11080  ixgbe: fix pci device refcount leak
- !11002  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10986  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11137  netfilter: nf_tables: unregister flowtable hooks on netns exit
- !11116  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11053  m68k: Fix spinlock race in kernel thread creation
- !11052  phonet: fix rtm_phonet_notify() skb allocation
- !11127  drm/amd/display: Check pipe offset before setting vblank
- !11120  misc: fastrpc: Don't remove map on creater_process and device_release
- netfilter: nf_tables: unregister flowtable hooks on netns exit
- drm/amd/display: Check pipe offset before setting vblank
- gsmi: fix null-deref in gsmi_get_variable
- !11090  net/mlx5: Always drain health in shutdown callback
- misc: fastrpc: Don't remove map on creater_process and device_release
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- io_uring: lock overflowing for IOPOLL
- usb: xhci: Check endpoint is valid before dereferencing it
- mISDN: Fix a use after free in hfcmulti_tx()
- !11066  xhci: Fix null pointer dereference when host dies
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- ixgbe: fix pci device refcount leak
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11073  drm/virtio: Fix GEM handle creation UAF
- drm/virtio: Fix GEM handle creation UAF
- !11046  bpf: Fix a segment issue when downgrading gso_size
- !11039  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- xhci: Fix null pointer dereference when host dies
- !11016 [sync] PR-10965:  perf: Optimize perf_pmu_migrate_context()
- m68k: Fix spinlock race in kernel thread creation
- phonet: fix rtm_phonet_notify() skb allocation
- !11000  media: venus: fix use after free in vdec_close
- !11024  drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- !11014  media: mediatek: vcodec: Handle invalid decoder vsi
- !10972  ext4: fix infinite loop when replaying fast_commit
- bpf: Fix a segment issue when downgrading gso_size
- !11031 [sync] PR-11006:  kvm: s390: Reject memory region operations for ucontrol VMs
- !10994  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- !11032 [sync] PR-10976:  CVE-2024-42126
- !10967  Revert "kbuild: fix false positive warning/error about missing libelf"
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- !10989  drm/amd/display: Add NULL pointer check for kzalloc
- !11020  net: usb: qmi_wwan: fix memory leak for not ip packets
- kvm: s390: Reject memory region operations for ucontrol VMs
- !10988  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10961  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- !10452 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !10996  CVE-2024-42290
- perf: Optimize perf_pmu_migrate_context()
- media: mediatek: vcodec: Handle invalid decoder vsi
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- drm/amd/display: Add NULL pointer check for kzalloc
- s390/sclp: Fix sclp_init() cleanup on failure
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- ext4: fix infinite loop when replaying fast_commit
- Revert "kbuild: fix false positive warning/error about missing libelf"
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- ipv6: sr: fix missing sk_buff release in seg6_input_core</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.92.0.173" date="1725451200">- !11373  xdp: fix invalid wait context of page_pool_destroy()
- !11369  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11362  kcm: Serialise kcm_sendmsg() for the same socket.
- !11353  regulator: da9211: Use irq handler when ready
- !11348 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11318  efi: fix NULL-deref in init error path
- !10997  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11285  fix CVE-2024-43905
- !11344  netfilter: ctnetlink: use helper function to calculate expect ID
- !11332  jbd2: avoid mount failed when commit block is partial submitted
- !11191  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11200  ibmvnic: don't release napi in __ibmvnic_open()
- !10750 v2  CVE-2024-41016
- !11195  tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- !11296  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11289  Add exception protection processing for vd in axi_chan_handle_err function
- !11312  nvme-fabrics: use reserved tag for reg read/write command
- !11311  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- regulator: da9211: Use irq handler when ready
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- jbd2: avoid mount failed when commit block is partial submitted
- efi: fix NULL-deref in init error path
- nvme-fabrics: use reserved tag for reg read/write command
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- !11059  drm/amdgpu: change vm-&gt;task_info handling
- !11056  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- !11281  misc: fastrpc: Fix use-after-free race condition for maps
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- Add exception protection processing for vd in axi_chan_handle_err function
- !11278  net/sched: act_mpls: Fix warning during failed attribute validation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11225  apparmor: Fix null pointer deref when receiving skb during sock creation
- misc: fastrpc: Fix use-after-free race condition for maps
- !11274  serial: core: check uartclk for zero to avoid divide by zero
- !11101  wifi: mac80211: sdata can be NULL during AMPDU start
- net/sched: act_mpls: Fix warning during failed attribute validation
- !11213  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11268  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11244 [sync] PR-11210:  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11253  CVE-2024-43892
- !11218  scsi: qla2xxx: validate nvme_local_port correctly
- !11180  block: initialize integrity buffer to zero before writing it to media
- !11112  sysctl: always initialize i_uid/i_gid
- !11166  f2fs: let's avoid panic if extent_tree is not created
- !11153  fix cve-2023-52896
- !11165  tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- memcg: protect concurrent access to mem_cgroup_idr
- !11232  Bluetooth: MGMT: Add error handling to pair_device()
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11172  tracing: Fix overflow in get_free_elt()
- !11212 [sync] PR-11123:  fix CVE-2024-42288
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- scsi: qla2xxx: validate nvme_local_port correctly
- !11161  usb: vhci-hcd: Do not drop references before new references are gained
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- scsi: qla2xxx: Fix for possible memory corruption
- !11148  powerpc/pseries: Fix scv instruction crash with kexec
- !11141  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- ibmvnic: don't release napi in __ibmvnic_open()
- tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- block: initialize integrity buffer to zero before writing it to media
- tracing: Fix overflow in get_free_elt()
- f2fs: let's avoid panic if extent_tree is not created
- tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- usb: vhci-hcd: Do not drop references before new references are gained
- btrfs: fix race between quota rescan and disable leading to NULL pointer deref
- btrfs: move QUOTA_ENABLED check to rescan_should_stop from btrfs_qgroup_rescan_worker
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- wifi: mac80211: sdata can be NULL during AMPDU start
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.93.0.174" date="1726142400">- !10941 v2  xfs: fix file creation
- !11492  Fix CVE-2022-48887
- !11471  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11103  soc: qcom: pdr: protect locator_addr with the main mutex
- !11446  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- !11392  fix CVE-2023-45896
- !11445 [sync] PR-11015:  nvme-pci: add missing condition check for existence of mapped data
- !11283  CVE-2024-44935
- !11451 [sync] PR-11390:  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- !11442 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- nvme-pci: add missing condition check for existence of mapped data
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11396 [sync] PR-11324:  drm/amd/display: Add null checker before passing variables
- !11416  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11429  nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- !11331  dma: fix call order in dmam_free_coherent
- !11170  CVE-2024-42267
- !11236  CVE-2024-43907
- !11410  btrfs: do not start relocation until in progress drops are done
- nfc: pn533: initialize struct pn533_out_arg properly
- nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- !11412  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11407 [sync] PR-11403:  btrfs: do not WARN_ON() if we have PageError set
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- btrfs: do not start relocation until in progress drops are done
- !11399  fuse: Initialize beyond-EOF page contents before setting uptodate
- btrfs: do not WARN_ON() if we have PageError set
- !11365  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11377  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11240 [sync] PR-11174:  md: restore 'noio_flag' for the last mddev_resume()
- fuse: Initialize beyond-EOF page contents before setting uptodate
- drm/amd/display: Add null checker before passing variables
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- dma: fix call order in dmam_free_coherent
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- md: restore 'noio_flag' for the last mddev_resume()
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- xfs: Fix file creation failure</changelog>
</package>
<package pkgid="c3c0c4f417ab66fd4c1a73fd12de80bc6e52c333b2e6c45e724785f9dab92e00" name="kernel" arch="src">
  <version epoch="0" ver="5.10.0" rel="136.94.0.175.oe2203sp1"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.85.0.166" date="1721217600">- !10068 [sync] PR-9984:  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !10032  ipv6: prevent possible NULL dereference in rt6_probe()
- !10063  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9991  netpoll: Fix race condition in netpoll_owner_active
- !10043  lib/generic-radix-tree.c: Don't overflow in peek()
- !9951  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9981  CVE-2024-40972
- !9995  Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- !9846 v2  CVE-2024-38598
- !9907  sock_map: avoid race between sock_map_close and sk_psock_put
- !9927  ocfs2: fix races between hole punching and AIO+DIO
- !9912  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9947  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9969 v2  netfilter: nft_set_pipapo: do not free live element
- !9980  Fix CVE-2023-52781
- !9954  drm/komeda: check for error-valued pointer
- !9923  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- netpoll: Fix race condition in netpoll_owner_active
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- ext4: remove duplicate definition of ext4_xattr_ibody_inline_set()
- usb: config: fix iteration issue in 'usb_get_bos_descriptor()'
- USB: core: Change configuration warnings to notices
- netfilter: nft_set_pipapo: do not free live element
- !9869  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9906  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9894  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9828  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9826  smb: client: fix potential deadlock when releasing mids
- !9890  ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9822 [sync] PR-9712:  fix CVE-2024-38540
- !9823 [sync] PR-9711:  fix CVE-2024-38615
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9840  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9873  CVE-2024-38570
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9636  ice: Do not use WQ_MEM_RECLAIM flag for workqueue
- !9747  CVE-2024-39469
- !9844  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- ice: Do not use WQ_MEM_RECLAIM flag for workqueue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.86.0.167" date="1721822400">- !10283 v2  CVE-2022-48816
- !9781  ksmbd: fix wrong DataOffset validation of create context
- !10301 v2  usb-storage: alauda: Check whether the media is initialized
- !10297  CVE-2023-52679
- usb-storage: alauda: Check whether the media is initialized
- !10263  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- of: unittest: Fix compile in the non-dynamic case
- of: unittest: Fix of_count_phandle_with_args() expected value message
- of: Fix double free in of_parse_phandle_with_args_map
- !10225  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10244  Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10230  ima: Fix use-after-free on a dentry's dname.name
- !10235  ima: Avoid blocking in RCU read-side critical section
- !10234  fix CVE-2024-41007
- !10201  net: dsa: seville: register the mdiobus under devres
- !10267  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !10256  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !9918  powerpc/pseries: Enforce hcall result buffer validity and size
- !10223  CVE-2024-35931
- !10085  nfs: Ensure that the NFS client returns a correct writeback error code
- ima: Avoid blocking in RCU read-side critical section
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- net: tcp: fix unexcepted socket die when snd_wnd is 0
- !10181 [sync] PR-9836:  fpga: manager: add owner module and take its refcount
- !10221  bpf: Fix overrunning reservations in ringbuf
- ima: Fix use-after-free on a dentry's dname.name
- !10200  dma-mapping: benchmark: fix node id validation
- !10209  drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10020  drm/exynos/vidi: fix memory leak in .get_modes()
- scsi: ufs: Fix a deadlock in the error handler
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- bpf: Fix overrunning reservations in ringbuf
- drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10136  ALSA: timer: Set lower bound of start tick time
- !10105  ecryptfs: Fix buffer size for tag 66 packet
- net: dsa: seville: register the mdiobus under devres
- dma-mapping: benchmark: fix node id validation
- !10140 [sync] PR-10095:  CVE-2024-40968
- !10108  tracing: Build event generation tests only as modules
- !10157 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10008  xfs: fix mount hung while sb recover fail
- fpga: manager: add owner module and take its refcount
- !10164  drop_monitor: replace spin_lock by raw_spin_lock
- !10163  RDMA/mlx5: Add check for srq max_sge attribute
- !10049  tipc: force a dst refcount before doing decryption
- !10023  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10042  Fix CVE-2024-36939
- MIPS: Octeon: Add PCIe link status check
- !10129  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10119  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10080  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10053  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10089  fix CVE-2024-40995
- !9993  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9902  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10098 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9932  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- ksmbd: fix wrong DataOffset validation of create context</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.87.0.168" date="1722427200">- !10435  md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !8942 [sync] PR-8468: v2  CVE-2024-35808
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !10067  iommu: Return right value in iommu_sva_bind_device()
- !10335  fix CVE-2024-36479 for sp1
- !10365  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10213  net: mvpp2: clear BM pool before initialization
- !10212  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- !10396  BMA: Fix DMA reset problem and change the version number
- !10343  fix CVE-2024-27010
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !10367 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10322  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- net/sched: initialize noop_qdisc owner
- net/sched: fix kabi change in struct Qdisc
- net/sched: Fix mirred deadlock on device recursion
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- !9369  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10072  serial: imx: Introduce timeout when waiting on transmitter empty
- !9975  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10314 [sync] PR-10187:  fix CVE-2021-47205
- !10313 [sync] PR-10189:  fix CVE-2024-40915
- !10252  fbdev: savage: Handle err return when savagefb_check_var failed
- !10308  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10259  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- fbdev: savage: Handle err return when savagefb_check_var failed
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- md/dm-raid: don't clear MD_RECOVERY_FROZEN after setting frozen
- md/dm-raid: don't call md_reap_sync_thread() directly</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.88.0.169" date="1723032000">- !10769  CVE-2024-41027
- !10667 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10724  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10738  net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10744  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10758  Fix CVE-2024-42160
- !10531  ftruncate: pass a signed offset
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10581 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10718  CVE-2024-42101
- !10712  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10728  net/iucv: Avoid explicit cpumask var allocation on stack
- !10696 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10719  gve: Account for stopped queues when reading NIC stats
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10620  fix CVE-2024-42129
- !9680  drm: vc4: Fix possible null pointer dereference
- !10671 [sync] PR-10598:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- gve: Account for stopped queues when reading NIC stats
- !10588 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- nvmet: always initialize cqe.result
- !10682  ocfs2: fix DIO failure due to insufficient transaction credits
- !10567  gpio: davinci: Validate the obtained number of IRQs
- !10669  fix CVE-2024-42076
- !10662  fix CVE-2024-41062
- !10651  xfs: don't walk off the end of a directory data block
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10655  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10632  sched/deadline: Fix task_struct reference leak
- !10520  xfs: add bounds checking to xlog_recover_process_data
- ocfs2: fix DIO failure due to insufficient transaction credits
- !10390  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: can: j1939: Initialize unused data in j1939_send_one()
- can: j1939: j1939_send_one(): fix missing CAN header initialization
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10638  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10645  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10637  RDMA/restrack: Fix potential invalid address access
- !10647  net: dsa: mv88e6xxx: Correct check for empty list
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10619  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10558  CVE-2024-42105
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10602  ppp: reject claimed-as-LCP but actually malformed packets
- !10611  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10604  IB/core: Implement a limit on UMAD receive List
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- s390/pkey: Wipe copies of protected- and secure-keys
- !10553  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10537  CVE-2024-42082
- !10595  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10570  ila: block BH in ila_output()
- !10563  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10587  filelock: Fix fcntl/close race recovery compat path
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10542  tap: add missing verification for short frame
- !10535  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10550  backport serveral bugfixes from upstream
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10549  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10528  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10421  stm class: Fix a double free in stm_register_device()
- !10478  ALSA: emux: improve patch ioctl data validation
- !10247  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10543  tun: add missing verification for short frame
- !10469 [sync] PR-10342:  CVE-2024-39471
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10464  null_blk: fix validation of block size
- bpf, events: Use prog to emit ksymbol event for main program
- bpf, perf: Use subprog name when reporting subprog ksymbol
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- bpf: ensure main program has an extable
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- tun: add missing verification for short frame
- tap: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10477  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10468  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10455  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- xfs: add bounds checking to xlog_recover_process_data
- !10461  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10494  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10488  fix CVE-2024-42086
- !9937  media: gspca: cpia1: shift-out-of-bounds in set_flicker
- !9930  ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- !9934  selinux: avoid dereference of garbage after mount failure
- !10379  drm/radeon: fix UBSAN warning in kv_dpm.c
- !10423  kunit: Fix kthread reference
- !10422  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10362  PCI/ROM: Fix PCI ROM header check bug
- !10459  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10405  Fix CVE-2024-41069
- ALSA: emux: improve patch ioctl data validation
- jffs2: Fix potential illegal address access in jffs2_free_inode
- !10353  fix CVE-2024-40976
- !10272  HID: core: remove unnecessary WARN_ON() in implement()
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- !10430  s390/qeth: fix deadlock during failing recovery
- !10441  net/sched: Fix UAF when resolving a clash
- !10447  net: ena: Add validation for completion descriptors consistency
- !10426  net: stmmac: move the EST lock to struct stmmac_priv
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- HID: core: remove unnecessary WARN_ON() in implement()
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- media: gspca: cpia1: shift-out-of-bounds in set_flicker
- selinux: avoid dereference of garbage after mount failure
- ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.89.0.170" date="1723636800">- !10881  orangefs: fix out-of-bounds fsid access
- !10880  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10879  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10884  crypto: aead,cipher - zeroize key buffer after use
- !10889  s390/pkey: Wipe copies of clear-key structures on failure
- !10822  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10844  netfilter: nf_tables: prefer nft_chain_validate
- !10868 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10874  USB: serial: mos7840: fix crash on resume
- s390/pkey: Wipe copies of clear-key structures on failure
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10829  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10867 [sync] PR-10817:  media: dvb-frontends: tda10048: Fix integer overflow
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- media: dvb-frontends: tda10048: Fix integer overflow
- !10864 v3  ext4: flexibly control whether to enable dioread_nolock by default
- !10850  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10617  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10830  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10828  fix CVE-2024-42095
- !10705  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10837  wifi: mt76: replace skb_put with skb_put_zero
- !10840  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- !10815  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10811  tcp_metrics: validate source addr length
- !10809  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10751  btrfs: qgroup: fix quota root leak after quota disable failure
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10782  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10734  filelock: Remove locks reliably when fcntl/close race is detected
- !10804 [sync] PR-10761:  leds: an30259a: Use devm_mutex_init() for mutex initialization
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10680  crypto: ecdh - explicitly zeroize private_key
- !10791 [sync] PR-10787:  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10779  Fix CVE-2021-47582
- !10780  crypto: hisilicon/sec - Fix memory leak for sec resource release
- !10783  s390/pkey: Wipe sensitive data on failure
- NFSD: Fix the behavior of READ near OFFSET_MAX
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- crypto: hisilicon/sec - Fix memory leak for sec resource release
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.90.0.171" date="1724155200">- !10981 [sync] PR-10679:  ibmvnic: Add tx check to prevent skb leak
- !11009  mm: avoid overflows in dirty throttling logic
- !10980  CVE-2024-42304
- mm: avoid overflows in dirty throttling logic
- !10983  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10938  CVE-2023-52868
- !10959  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10613  can: mcp251xfd: fix infinite loop when xmit fails
- !10952  Fix CVE-2024-36880
- !10790 [sync] PR-10652:  nvme: avoid double free special payload
- !10789 [sync] PR-10624:  ata: libata-core: Fix double free on error
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ibmvnic: Add tx check to prevent skb leak
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10955  leds: trigger: Unregister sysfs attributes before calling deactivate()
- !10866 [sync] PR-10514:  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10932  drm/lima: fix shared irq handling on driver remove
- !10948  net: nexthop: Initialize all fields in dumped nexthops
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- !10929  libceph: fix race between delayed_work() and ceph_monc_stop()
- thermal: core: prevent potential string overflow
- drm/lima: fix shared irq handling on driver remove
- !10747  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10917  Fix CVE-2024-36031
- !10910  Fix CVE-2024-40966
- keys: Fix overwrite of key expiration on instantiation
- keys, dns: Fix size check of V1 server-list header
- keys, dns: Fix missing size check of V1 server-list header
- keys, dns: Allow key types (eg. DNS) to be reclaimed immediately on expiry
- !10916  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10848  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- nvme: avoid double free special payload
- ata: libata-core: Fix double free on error
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.91.0.172" date="1724760000">- !11162  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11152  protect the fetch of -&gt;fd[fd
- !11096  usb: xhci: Check endpoint is valid before dereferencing it
- !11093  mISDN: Fix a use after free in hfcmulti_tx()
- !11146  drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11082  f2fs: fix to don't dirty inode for readonly filesystem
- !11097  io_uring: lock overflowing for IOPOLL
- !11124  Fix CVE-2023-52893
- !11139 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !11098  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11029  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- !11076  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11080  ixgbe: fix pci device refcount leak
- !11002  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10986  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11137  netfilter: nf_tables: unregister flowtable hooks on netns exit
- !11116  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11053  m68k: Fix spinlock race in kernel thread creation
- !11052  phonet: fix rtm_phonet_notify() skb allocation
- !11127  drm/amd/display: Check pipe offset before setting vblank
- !11120  misc: fastrpc: Don't remove map on creater_process and device_release
- netfilter: nf_tables: unregister flowtable hooks on netns exit
- drm/amd/display: Check pipe offset before setting vblank
- gsmi: fix null-deref in gsmi_get_variable
- !11090  net/mlx5: Always drain health in shutdown callback
- misc: fastrpc: Don't remove map on creater_process and device_release
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- io_uring: lock overflowing for IOPOLL
- usb: xhci: Check endpoint is valid before dereferencing it
- mISDN: Fix a use after free in hfcmulti_tx()
- !11066  xhci: Fix null pointer dereference when host dies
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- ixgbe: fix pci device refcount leak
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11073  drm/virtio: Fix GEM handle creation UAF
- drm/virtio: Fix GEM handle creation UAF
- !11046  bpf: Fix a segment issue when downgrading gso_size
- !11039  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- xhci: Fix null pointer dereference when host dies
- !11016 [sync] PR-10965:  perf: Optimize perf_pmu_migrate_context()
- m68k: Fix spinlock race in kernel thread creation
- phonet: fix rtm_phonet_notify() skb allocation
- !11000  media: venus: fix use after free in vdec_close
- !11024  drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- !11014  media: mediatek: vcodec: Handle invalid decoder vsi
- !10972  ext4: fix infinite loop when replaying fast_commit
- bpf: Fix a segment issue when downgrading gso_size
- !11031 [sync] PR-11006:  kvm: s390: Reject memory region operations for ucontrol VMs
- !10994  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- !11032 [sync] PR-10976:  CVE-2024-42126
- !10967  Revert "kbuild: fix false positive warning/error about missing libelf"
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- !10989  drm/amd/display: Add NULL pointer check for kzalloc
- !11020  net: usb: qmi_wwan: fix memory leak for not ip packets
- kvm: s390: Reject memory region operations for ucontrol VMs
- !10988  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10961  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- !10452 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !10996  CVE-2024-42290
- perf: Optimize perf_pmu_migrate_context()
- media: mediatek: vcodec: Handle invalid decoder vsi
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- drm/amd/display: Add NULL pointer check for kzalloc
- s390/sclp: Fix sclp_init() cleanup on failure
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- ext4: fix infinite loop when replaying fast_commit
- Revert "kbuild: fix false positive warning/error about missing libelf"
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- ipv6: sr: fix missing sk_buff release in seg6_input_core</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.92.0.173" date="1725451200">- !11373  xdp: fix invalid wait context of page_pool_destroy()
- !11369  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11362  kcm: Serialise kcm_sendmsg() for the same socket.
- !11353  regulator: da9211: Use irq handler when ready
- !11348 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11318  efi: fix NULL-deref in init error path
- !10997  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11285  fix CVE-2024-43905
- !11344  netfilter: ctnetlink: use helper function to calculate expect ID
- !11332  jbd2: avoid mount failed when commit block is partial submitted
- !11191  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11200  ibmvnic: don't release napi in __ibmvnic_open()
- !10750 v2  CVE-2024-41016
- !11195  tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- !11296  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11289  Add exception protection processing for vd in axi_chan_handle_err function
- !11312  nvme-fabrics: use reserved tag for reg read/write command
- !11311  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- regulator: da9211: Use irq handler when ready
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- jbd2: avoid mount failed when commit block is partial submitted
- efi: fix NULL-deref in init error path
- nvme-fabrics: use reserved tag for reg read/write command
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- !11059  drm/amdgpu: change vm-&gt;task_info handling
- !11056  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- !11281  misc: fastrpc: Fix use-after-free race condition for maps
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- Add exception protection processing for vd in axi_chan_handle_err function
- !11278  net/sched: act_mpls: Fix warning during failed attribute validation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11225  apparmor: Fix null pointer deref when receiving skb during sock creation
- misc: fastrpc: Fix use-after-free race condition for maps
- !11274  serial: core: check uartclk for zero to avoid divide by zero
- !11101  wifi: mac80211: sdata can be NULL during AMPDU start
- net/sched: act_mpls: Fix warning during failed attribute validation
- !11213  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11268  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11244 [sync] PR-11210:  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11253  CVE-2024-43892
- !11218  scsi: qla2xxx: validate nvme_local_port correctly
- !11180  block: initialize integrity buffer to zero before writing it to media
- !11112  sysctl: always initialize i_uid/i_gid
- !11166  f2fs: let's avoid panic if extent_tree is not created
- !11153  fix cve-2023-52896
- !11165  tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- memcg: protect concurrent access to mem_cgroup_idr
- !11232  Bluetooth: MGMT: Add error handling to pair_device()
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11172  tracing: Fix overflow in get_free_elt()
- !11212 [sync] PR-11123:  fix CVE-2024-42288
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- scsi: qla2xxx: validate nvme_local_port correctly
- !11161  usb: vhci-hcd: Do not drop references before new references are gained
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- scsi: qla2xxx: Fix for possible memory corruption
- !11148  powerpc/pseries: Fix scv instruction crash with kexec
- !11141  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- ibmvnic: don't release napi in __ibmvnic_open()
- tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- block: initialize integrity buffer to zero before writing it to media
- tracing: Fix overflow in get_free_elt()
- f2fs: let's avoid panic if extent_tree is not created
- tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- usb: vhci-hcd: Do not drop references before new references are gained
- btrfs: fix race between quota rescan and disable leading to NULL pointer deref
- btrfs: move QUOTA_ENABLED check to rescan_should_stop from btrfs_qgroup_rescan_worker
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- wifi: mac80211: sdata can be NULL during AMPDU start
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.93.0.174" date="1726142400">- !10941 v2  xfs: fix file creation
- !11492  Fix CVE-2022-48887
- !11471  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11103  soc: qcom: pdr: protect locator_addr with the main mutex
- !11446  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- !11392  fix CVE-2023-45896
- !11445 [sync] PR-11015:  nvme-pci: add missing condition check for existence of mapped data
- !11283  CVE-2024-44935
- !11451 [sync] PR-11390:  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- !11442 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- nvme-pci: add missing condition check for existence of mapped data
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11396 [sync] PR-11324:  drm/amd/display: Add null checker before passing variables
- !11416  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11429  nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- !11331  dma: fix call order in dmam_free_coherent
- !11170  CVE-2024-42267
- !11236  CVE-2024-43907
- !11410  btrfs: do not start relocation until in progress drops are done
- nfc: pn533: initialize struct pn533_out_arg properly
- nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- !11412  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11407 [sync] PR-11403:  btrfs: do not WARN_ON() if we have PageError set
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- btrfs: do not start relocation until in progress drops are done
- !11399  fuse: Initialize beyond-EOF page contents before setting uptodate
- btrfs: do not WARN_ON() if we have PageError set
- !11365  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11377  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11240 [sync] PR-11174:  md: restore 'noio_flag' for the last mddev_resume()
- fuse: Initialize beyond-EOF page contents before setting uptodate
- drm/amd/display: Add null checker before passing variables
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- dma: fix call order in dmam_free_coherent
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- md: restore 'noio_flag' for the last mddev_resume()
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- xfs: Fix file creation failure</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.94.0.175" date="1726660800">- !11516  fix CVE-2024-44988
- !11523  ipv6: prevent UAF in ip6_send_skb()
- !11519  ipv6: fix possible UAF in ip6_finish_output2()
- !11489 [sync] PR-11487:  bna: ensure the copied buf is NUL terminated
- !8756  net: USB: Fix wrong-direction WARNING in plusb.c
- !11533  Fix CVE-2023-52915
- media: dvb-usb-v2: af9035: fix missing unlock
- media: dvb-usb-v2: af9035: Fix null-ptr-deref in af9035_i2c_master_xfer
- !11483  drm/qxl: Add check for drm_cvt_mode
- !11477  Fix CVE-2023-52916
- !11458  usb: gadget: core: Check for unset descriptor
- !11511  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- bna: ensure the copied buf is NUL terminated
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- net: USB: Fix wrong-direction WARNING in plusb.c</changelog>
</package>
<package pkgid="53dd51f3b0a047ac51168089e1cb6ed3e490e09830d04b25a851d3049b54c387" name="kernel" arch="src">
  <version epoch="0" ver="5.10.0" rel="136.95.0.176.oe2203sp1"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.86.0.167" date="1721822400">- !10283 v2  CVE-2022-48816
- !9781  ksmbd: fix wrong DataOffset validation of create context
- !10301 v2  usb-storage: alauda: Check whether the media is initialized
- !10297  CVE-2023-52679
- usb-storage: alauda: Check whether the media is initialized
- !10263  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- of: unittest: Fix compile in the non-dynamic case
- of: unittest: Fix of_count_phandle_with_args() expected value message
- of: Fix double free in of_parse_phandle_with_args_map
- !10225  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10244  Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10230  ima: Fix use-after-free on a dentry's dname.name
- !10235  ima: Avoid blocking in RCU read-side critical section
- !10234  fix CVE-2024-41007
- !10201  net: dsa: seville: register the mdiobus under devres
- !10267  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !10256  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !9918  powerpc/pseries: Enforce hcall result buffer validity and size
- !10223  CVE-2024-35931
- !10085  nfs: Ensure that the NFS client returns a correct writeback error code
- ima: Avoid blocking in RCU read-side critical section
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- net: tcp: fix unexcepted socket die when snd_wnd is 0
- !10181 [sync] PR-9836:  fpga: manager: add owner module and take its refcount
- !10221  bpf: Fix overrunning reservations in ringbuf
- ima: Fix use-after-free on a dentry's dname.name
- !10200  dma-mapping: benchmark: fix node id validation
- !10209  drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10020  drm/exynos/vidi: fix memory leak in .get_modes()
- scsi: ufs: Fix a deadlock in the error handler
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- bpf: Fix overrunning reservations in ringbuf
- drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10136  ALSA: timer: Set lower bound of start tick time
- !10105  ecryptfs: Fix buffer size for tag 66 packet
- net: dsa: seville: register the mdiobus under devres
- dma-mapping: benchmark: fix node id validation
- !10140 [sync] PR-10095:  CVE-2024-40968
- !10108  tracing: Build event generation tests only as modules
- !10157 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10008  xfs: fix mount hung while sb recover fail
- fpga: manager: add owner module and take its refcount
- !10164  drop_monitor: replace spin_lock by raw_spin_lock
- !10163  RDMA/mlx5: Add check for srq max_sge attribute
- !10049  tipc: force a dst refcount before doing decryption
- !10023  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10042  Fix CVE-2024-36939
- MIPS: Octeon: Add PCIe link status check
- !10129  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10119  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10080  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10053  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10089  fix CVE-2024-40995
- !9993  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9902  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10098 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9932  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- ksmbd: fix wrong DataOffset validation of create context</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.87.0.168" date="1722427200">- !10435  md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !8942 [sync] PR-8468: v2  CVE-2024-35808
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !10067  iommu: Return right value in iommu_sva_bind_device()
- !10335  fix CVE-2024-36479 for sp1
- !10365  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10213  net: mvpp2: clear BM pool before initialization
- !10212  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- !10396  BMA: Fix DMA reset problem and change the version number
- !10343  fix CVE-2024-27010
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !10367 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10322  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- net/sched: initialize noop_qdisc owner
- net/sched: fix kabi change in struct Qdisc
- net/sched: Fix mirred deadlock on device recursion
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- !9369  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10072  serial: imx: Introduce timeout when waiting on transmitter empty
- !9975  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10314 [sync] PR-10187:  fix CVE-2021-47205
- !10313 [sync] PR-10189:  fix CVE-2024-40915
- !10252  fbdev: savage: Handle err return when savagefb_check_var failed
- !10308  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10259  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- fbdev: savage: Handle err return when savagefb_check_var failed
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- md/dm-raid: don't clear MD_RECOVERY_FROZEN after setting frozen
- md/dm-raid: don't call md_reap_sync_thread() directly</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.88.0.169" date="1723032000">- !10769  CVE-2024-41027
- !10667 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10724  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10738  net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10744  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10758  Fix CVE-2024-42160
- !10531  ftruncate: pass a signed offset
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10581 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10718  CVE-2024-42101
- !10712  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10728  net/iucv: Avoid explicit cpumask var allocation on stack
- !10696 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10719  gve: Account for stopped queues when reading NIC stats
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10620  fix CVE-2024-42129
- !9680  drm: vc4: Fix possible null pointer dereference
- !10671 [sync] PR-10598:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- gve: Account for stopped queues when reading NIC stats
- !10588 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- nvmet: always initialize cqe.result
- !10682  ocfs2: fix DIO failure due to insufficient transaction credits
- !10567  gpio: davinci: Validate the obtained number of IRQs
- !10669  fix CVE-2024-42076
- !10662  fix CVE-2024-41062
- !10651  xfs: don't walk off the end of a directory data block
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10655  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10632  sched/deadline: Fix task_struct reference leak
- !10520  xfs: add bounds checking to xlog_recover_process_data
- ocfs2: fix DIO failure due to insufficient transaction credits
- !10390  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: can: j1939: Initialize unused data in j1939_send_one()
- can: j1939: j1939_send_one(): fix missing CAN header initialization
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10638  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10645  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10637  RDMA/restrack: Fix potential invalid address access
- !10647  net: dsa: mv88e6xxx: Correct check for empty list
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10619  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10558  CVE-2024-42105
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10602  ppp: reject claimed-as-LCP but actually malformed packets
- !10611  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10604  IB/core: Implement a limit on UMAD receive List
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- s390/pkey: Wipe copies of protected- and secure-keys
- !10553  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10537  CVE-2024-42082
- !10595  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10570  ila: block BH in ila_output()
- !10563  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10587  filelock: Fix fcntl/close race recovery compat path
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10542  tap: add missing verification for short frame
- !10535  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10550  backport serveral bugfixes from upstream
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10549  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10528  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10421  stm class: Fix a double free in stm_register_device()
- !10478  ALSA: emux: improve patch ioctl data validation
- !10247  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10543  tun: add missing verification for short frame
- !10469 [sync] PR-10342:  CVE-2024-39471
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10464  null_blk: fix validation of block size
- bpf, events: Use prog to emit ksymbol event for main program
- bpf, perf: Use subprog name when reporting subprog ksymbol
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- bpf: ensure main program has an extable
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- tun: add missing verification for short frame
- tap: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10477  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10468  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10455  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- xfs: add bounds checking to xlog_recover_process_data
- !10461  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10494  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10488  fix CVE-2024-42086
- !9937  media: gspca: cpia1: shift-out-of-bounds in set_flicker
- !9930  ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- !9934  selinux: avoid dereference of garbage after mount failure
- !10379  drm/radeon: fix UBSAN warning in kv_dpm.c
- !10423  kunit: Fix kthread reference
- !10422  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10362  PCI/ROM: Fix PCI ROM header check bug
- !10459  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10405  Fix CVE-2024-41069
- ALSA: emux: improve patch ioctl data validation
- jffs2: Fix potential illegal address access in jffs2_free_inode
- !10353  fix CVE-2024-40976
- !10272  HID: core: remove unnecessary WARN_ON() in implement()
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- !10430  s390/qeth: fix deadlock during failing recovery
- !10441  net/sched: Fix UAF when resolving a clash
- !10447  net: ena: Add validation for completion descriptors consistency
- !10426  net: stmmac: move the EST lock to struct stmmac_priv
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- HID: core: remove unnecessary WARN_ON() in implement()
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- media: gspca: cpia1: shift-out-of-bounds in set_flicker
- selinux: avoid dereference of garbage after mount failure
- ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.89.0.170" date="1723636800">- !10881  orangefs: fix out-of-bounds fsid access
- !10880  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10879  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10884  crypto: aead,cipher - zeroize key buffer after use
- !10889  s390/pkey: Wipe copies of clear-key structures on failure
- !10822  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10844  netfilter: nf_tables: prefer nft_chain_validate
- !10868 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10874  USB: serial: mos7840: fix crash on resume
- s390/pkey: Wipe copies of clear-key structures on failure
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10829  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10867 [sync] PR-10817:  media: dvb-frontends: tda10048: Fix integer overflow
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- media: dvb-frontends: tda10048: Fix integer overflow
- !10864 v3  ext4: flexibly control whether to enable dioread_nolock by default
- !10850  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10617  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10830  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10828  fix CVE-2024-42095
- !10705  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10837  wifi: mt76: replace skb_put with skb_put_zero
- !10840  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- !10815  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10811  tcp_metrics: validate source addr length
- !10809  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10751  btrfs: qgroup: fix quota root leak after quota disable failure
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10782  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10734  filelock: Remove locks reliably when fcntl/close race is detected
- !10804 [sync] PR-10761:  leds: an30259a: Use devm_mutex_init() for mutex initialization
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10680  crypto: ecdh - explicitly zeroize private_key
- !10791 [sync] PR-10787:  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10779  Fix CVE-2021-47582
- !10780  crypto: hisilicon/sec - Fix memory leak for sec resource release
- !10783  s390/pkey: Wipe sensitive data on failure
- NFSD: Fix the behavior of READ near OFFSET_MAX
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- crypto: hisilicon/sec - Fix memory leak for sec resource release
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.90.0.171" date="1724155200">- !10981 [sync] PR-10679:  ibmvnic: Add tx check to prevent skb leak
- !11009  mm: avoid overflows in dirty throttling logic
- !10980  CVE-2024-42304
- mm: avoid overflows in dirty throttling logic
- !10983  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10938  CVE-2023-52868
- !10959  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10613  can: mcp251xfd: fix infinite loop when xmit fails
- !10952  Fix CVE-2024-36880
- !10790 [sync] PR-10652:  nvme: avoid double free special payload
- !10789 [sync] PR-10624:  ata: libata-core: Fix double free on error
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ibmvnic: Add tx check to prevent skb leak
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10955  leds: trigger: Unregister sysfs attributes before calling deactivate()
- !10866 [sync] PR-10514:  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10932  drm/lima: fix shared irq handling on driver remove
- !10948  net: nexthop: Initialize all fields in dumped nexthops
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- !10929  libceph: fix race between delayed_work() and ceph_monc_stop()
- thermal: core: prevent potential string overflow
- drm/lima: fix shared irq handling on driver remove
- !10747  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10917  Fix CVE-2024-36031
- !10910  Fix CVE-2024-40966
- keys: Fix overwrite of key expiration on instantiation
- keys, dns: Fix size check of V1 server-list header
- keys, dns: Fix missing size check of V1 server-list header
- keys, dns: Allow key types (eg. DNS) to be reclaimed immediately on expiry
- !10916  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10848  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- nvme: avoid double free special payload
- ata: libata-core: Fix double free on error
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.91.0.172" date="1724760000">- !11162  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11152  protect the fetch of -&gt;fd[fd
- !11096  usb: xhci: Check endpoint is valid before dereferencing it
- !11093  mISDN: Fix a use after free in hfcmulti_tx()
- !11146  drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11082  f2fs: fix to don't dirty inode for readonly filesystem
- !11097  io_uring: lock overflowing for IOPOLL
- !11124  Fix CVE-2023-52893
- !11139 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !11098  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11029  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- !11076  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11080  ixgbe: fix pci device refcount leak
- !11002  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10986  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11137  netfilter: nf_tables: unregister flowtable hooks on netns exit
- !11116  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11053  m68k: Fix spinlock race in kernel thread creation
- !11052  phonet: fix rtm_phonet_notify() skb allocation
- !11127  drm/amd/display: Check pipe offset before setting vblank
- !11120  misc: fastrpc: Don't remove map on creater_process and device_release
- netfilter: nf_tables: unregister flowtable hooks on netns exit
- drm/amd/display: Check pipe offset before setting vblank
- gsmi: fix null-deref in gsmi_get_variable
- !11090  net/mlx5: Always drain health in shutdown callback
- misc: fastrpc: Don't remove map on creater_process and device_release
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- io_uring: lock overflowing for IOPOLL
- usb: xhci: Check endpoint is valid before dereferencing it
- mISDN: Fix a use after free in hfcmulti_tx()
- !11066  xhci: Fix null pointer dereference when host dies
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- ixgbe: fix pci device refcount leak
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11073  drm/virtio: Fix GEM handle creation UAF
- drm/virtio: Fix GEM handle creation UAF
- !11046  bpf: Fix a segment issue when downgrading gso_size
- !11039  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- xhci: Fix null pointer dereference when host dies
- !11016 [sync] PR-10965:  perf: Optimize perf_pmu_migrate_context()
- m68k: Fix spinlock race in kernel thread creation
- phonet: fix rtm_phonet_notify() skb allocation
- !11000  media: venus: fix use after free in vdec_close
- !11024  drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- !11014  media: mediatek: vcodec: Handle invalid decoder vsi
- !10972  ext4: fix infinite loop when replaying fast_commit
- bpf: Fix a segment issue when downgrading gso_size
- !11031 [sync] PR-11006:  kvm: s390: Reject memory region operations for ucontrol VMs
- !10994  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- !11032 [sync] PR-10976:  CVE-2024-42126
- !10967  Revert "kbuild: fix false positive warning/error about missing libelf"
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- !10989  drm/amd/display: Add NULL pointer check for kzalloc
- !11020  net: usb: qmi_wwan: fix memory leak for not ip packets
- kvm: s390: Reject memory region operations for ucontrol VMs
- !10988  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10961  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- !10452 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !10996  CVE-2024-42290
- perf: Optimize perf_pmu_migrate_context()
- media: mediatek: vcodec: Handle invalid decoder vsi
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- drm/amd/display: Add NULL pointer check for kzalloc
- s390/sclp: Fix sclp_init() cleanup on failure
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- ext4: fix infinite loop when replaying fast_commit
- Revert "kbuild: fix false positive warning/error about missing libelf"
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- ipv6: sr: fix missing sk_buff release in seg6_input_core</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.92.0.173" date="1725451200">- !11373  xdp: fix invalid wait context of page_pool_destroy()
- !11369  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11362  kcm: Serialise kcm_sendmsg() for the same socket.
- !11353  regulator: da9211: Use irq handler when ready
- !11348 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11318  efi: fix NULL-deref in init error path
- !10997  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11285  fix CVE-2024-43905
- !11344  netfilter: ctnetlink: use helper function to calculate expect ID
- !11332  jbd2: avoid mount failed when commit block is partial submitted
- !11191  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11200  ibmvnic: don't release napi in __ibmvnic_open()
- !10750 v2  CVE-2024-41016
- !11195  tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- !11296  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11289  Add exception protection processing for vd in axi_chan_handle_err function
- !11312  nvme-fabrics: use reserved tag for reg read/write command
- !11311  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- regulator: da9211: Use irq handler when ready
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- jbd2: avoid mount failed when commit block is partial submitted
- efi: fix NULL-deref in init error path
- nvme-fabrics: use reserved tag for reg read/write command
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- !11059  drm/amdgpu: change vm-&gt;task_info handling
- !11056  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- !11281  misc: fastrpc: Fix use-after-free race condition for maps
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- Add exception protection processing for vd in axi_chan_handle_err function
- !11278  net/sched: act_mpls: Fix warning during failed attribute validation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11225  apparmor: Fix null pointer deref when receiving skb during sock creation
- misc: fastrpc: Fix use-after-free race condition for maps
- !11274  serial: core: check uartclk for zero to avoid divide by zero
- !11101  wifi: mac80211: sdata can be NULL during AMPDU start
- net/sched: act_mpls: Fix warning during failed attribute validation
- !11213  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11268  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11244 [sync] PR-11210:  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11253  CVE-2024-43892
- !11218  scsi: qla2xxx: validate nvme_local_port correctly
- !11180  block: initialize integrity buffer to zero before writing it to media
- !11112  sysctl: always initialize i_uid/i_gid
- !11166  f2fs: let's avoid panic if extent_tree is not created
- !11153  fix cve-2023-52896
- !11165  tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- memcg: protect concurrent access to mem_cgroup_idr
- !11232  Bluetooth: MGMT: Add error handling to pair_device()
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11172  tracing: Fix overflow in get_free_elt()
- !11212 [sync] PR-11123:  fix CVE-2024-42288
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- scsi: qla2xxx: validate nvme_local_port correctly
- !11161  usb: vhci-hcd: Do not drop references before new references are gained
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- scsi: qla2xxx: Fix for possible memory corruption
- !11148  powerpc/pseries: Fix scv instruction crash with kexec
- !11141  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- ibmvnic: don't release napi in __ibmvnic_open()
- tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- block: initialize integrity buffer to zero before writing it to media
- tracing: Fix overflow in get_free_elt()
- f2fs: let's avoid panic if extent_tree is not created
- tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- usb: vhci-hcd: Do not drop references before new references are gained
- btrfs: fix race between quota rescan and disable leading to NULL pointer deref
- btrfs: move QUOTA_ENABLED check to rescan_should_stop from btrfs_qgroup_rescan_worker
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- wifi: mac80211: sdata can be NULL during AMPDU start
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.93.0.174" date="1726142400">- !10941 v2  xfs: fix file creation
- !11492  Fix CVE-2022-48887
- !11471  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11103  soc: qcom: pdr: protect locator_addr with the main mutex
- !11446  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- !11392  fix CVE-2023-45896
- !11445 [sync] PR-11015:  nvme-pci: add missing condition check for existence of mapped data
- !11283  CVE-2024-44935
- !11451 [sync] PR-11390:  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- !11442 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- nvme-pci: add missing condition check for existence of mapped data
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11396 [sync] PR-11324:  drm/amd/display: Add null checker before passing variables
- !11416  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11429  nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- !11331  dma: fix call order in dmam_free_coherent
- !11170  CVE-2024-42267
- !11236  CVE-2024-43907
- !11410  btrfs: do not start relocation until in progress drops are done
- nfc: pn533: initialize struct pn533_out_arg properly
- nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- !11412  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11407 [sync] PR-11403:  btrfs: do not WARN_ON() if we have PageError set
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- btrfs: do not start relocation until in progress drops are done
- !11399  fuse: Initialize beyond-EOF page contents before setting uptodate
- btrfs: do not WARN_ON() if we have PageError set
- !11365  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11377  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11240 [sync] PR-11174:  md: restore 'noio_flag' for the last mddev_resume()
- fuse: Initialize beyond-EOF page contents before setting uptodate
- drm/amd/display: Add null checker before passing variables
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- dma: fix call order in dmam_free_coherent
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- md: restore 'noio_flag' for the last mddev_resume()
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- xfs: Fix file creation failure</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.94.0.175" date="1726660800">- !11516  fix CVE-2024-44988
- !11523  ipv6: prevent UAF in ip6_send_skb()
- !11519  ipv6: fix possible UAF in ip6_finish_output2()
- !11489 [sync] PR-11487:  bna: ensure the copied buf is NUL terminated
- !8756  net: USB: Fix wrong-direction WARNING in plusb.c
- !11533  Fix CVE-2023-52915
- media: dvb-usb-v2: af9035: fix missing unlock
- media: dvb-usb-v2: af9035: Fix null-ptr-deref in af9035_i2c_master_xfer
- !11483  drm/qxl: Add check for drm_cvt_mode
- !11477  Fix CVE-2023-52916
- !11458  usb: gadget: core: Check for unset descriptor
- !11511  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- bna: ensure the copied buf is NUL terminated
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- net: USB: Fix wrong-direction WARNING in plusb.c</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.95.0.176" date="1727265600">- !11712  btrfs: fix qgroup reserve leaks in cow_file_range
- !11724  Squashfs: sanity check symbolic link size
- !11710  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11709  CVE-2024-46751
- !11702  userfaultfd: fix checks for huge PMDs
- !11699  x86/mm: Fix pti_clone_pgtable() alignment assumption
- Squashfs: sanity check symbolic link size
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- !9776  wifi: ar5523: enable proper endpoint verification
- !11664  drm/amd/pm: fix the Out-of-bounds read warning
- !11643  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11650  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11634  fix CVE-2024-46723
- !11647  net: hns3: fix a deadlock problem when config TC during resetting
- !11536  usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate()
- !11627 [sync] PR-11615:  mmc: mmc_test: Fix NULL dereference on allocation failure
- !11576 [sync] PR-11012:  hfsplus: fix uninit-value in copy_name
- !11589  drm/amd/display: Skip finding free audio for unknown engine_id
- !11587  jfs: don't walk off the end of ealist
- !11580  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11636  netfilter: tproxy: bail out if IP has been disabled on the device
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- net: hns3: fix a deadlock problem when config TC during resetting
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11611  Input: uinput - reject requests with unreasonable number of slots
- !10937  f2fs: avoid format-overflow warning
- drm/amdgpu: fix ucode
- !11591 [sync] PR-8827: v2  iomap: fix sub-page not set dirty state
- mmc: mmc_test: Fix NULL dereference on allocation failure
- !11597 v2  mptcp: pm: avoid possible UaF when selecting endp
- !11605  Fix iBMA bug and change version
- !11601 [sync] PR-11583:  nfs: always check dreq-&gt;error after a commit
- Input: uinput - reject requests with unreasonable number of slots
- !11590  CVE-2024-36915
- !10934  drm/amd/display: Check index msg_id before read or write
- !10935  ata: libata-core: Fix null pointer dereference on error
- !11599 [sync] PR-11584:  vfs: Don't evict inode under the inode lru traversing context
- BMA: Fix edma driver initialization problem and change the version number.
- !11595  gtp: pull network headers in gtp_dev_xmit()
- nfs: always check dreq-&gt;error after a commit
- vfs: Don't evict inode under the inode lru traversing context
- mptcp: pm: avoid possible UaF when selecting endp
- gtp: pull network headers in gtp_dev_xmit()
- iomap: Ensure sub-page dirty state is set during mmap writes
- Revert "iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor"
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11575  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- !11572  nilfs2: fix general protection fault in nilfs_btree_insert()
- kobject_uevent: Fix OOB access within zap_modalias_env()
- hfsplus: fix uninit-value in copy_name
- nilfs2: add missing check for inode numbers on directory entries
- !11571  NFSD: Fix ia_size underflow
- nilfs2: fix general protection fault in nilfs_btree_insert()
- NFSD: Fix ia_size underflow
- usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate()
- f2fs: avoid format-overflow warning
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- wifi: ar5523: enable proper endpoint verification</changelog>
</package>
<package pkgid="515b7f86b14d14d7cdf83b27b65368bebbafbcda821c968eb0e6d7ed92bd10bd" name="krb5" arch="src">
  <version epoch="0" ver="1.19.2" rel="17.oe2203sp1"/>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 1.19.2-8" date="1686830400">- add version for Obsoletes and Provides of workstation</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 1.19.2-9" date="1692100800">- fix CVE-2023-36054</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 1.19.2-10" date="1695124800">- backport patches</changelog>
  <changelog author="zhangruifang &lt;zhangruifang1@h-partners.com&gt; - 1.19.2-11" date="1701345600">- Backport patches from upstream community</changelog>
  <changelog author="xuraoqing&lt;xuraoqing@huawei.com&gt; - 1.19.2-12" date="1703073600">- backport patches to fix umimportant memory leaks</changelog>
  <changelog author="xuraoqing&lt;xuraoqing@huawei.com&gt; - 1.19.2-13" date="1703851200">- backport patches</changelog>
  <changelog author="zhangruifang &lt;zhangruifang1@h-partners.com&gt; - 1.19.2-14" date="1706184000">- Backport patches from upstream community</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 1.19.2-15" date="1710849600">- backport patches from upstream</changelog>
  <changelog author="gengqihu &lt;gengqihu2@h-partners.com&gt; - 1.19.2-16" date="1718625600">- backport patches from upstream</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 1.19.2-17" date="1720094400">- backport patches to fix bugs and CVE-2024-37370 CVE-2024-37371</changelog>
</package>
<package pkgid="642c1687507c684c565563180b76c0672eb482bc92c07278cb075a0c734ab6a8" name="krb5" arch="src">
  <version epoch="0" ver="1.19.2" rel="9.oe2203sp1"/>
  <changelog author="gaoyusong &lt;gaoyusong1@huawei.com&gt; - 1.19.1-3" date="1629892800">- Fix CVE-2021-37750</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.19.2-1" date="1639396800">- Update to 1.19.2</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.19.2-2" date="1646654400">- Add ExecStartPost option to krb5kdc.service for solving error message when krb5kdc starting</changelog>
  <changelog author="zhouchenchen &lt;zhouchenchen@huawei.com&gt; - 1.19.2-3" date="1666180800">- update version to 1.19.2.3</changelog>
  <changelog author="zhouchenchen &lt;zhouchenchen@huawei.com&gt; - 1.19.2-4" date="1669982400">- fix CVE-2022-42898</changelog>
  <changelog author="zhouchenchen &lt;zhouchenchen@huawei.com&gt; - 1.19.2-5" date="1671537600">- fix some coredump</changelog>
  <changelog author="zhouchenchen &lt;zhouchenchen@huawei.com&gt; - 1.19.2-6" date="1671624000">- backport some patches</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 1.19.2-7" date="1686225600">- backport some patches</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 1.19.2-8" date="1686830400">- add version for Obsoletes and Provides of workstation</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 1.19.2-9" date="1692100800">- fix CVE-2023-36054</changelog>
</package>
<package pkgid="819a86fa5934b96a52d5085fe127ceac1b8978c7a25e300a5314e6c521fd3546" name="kronosnet" arch="src">
  <version epoch="0" ver="1.20" rel="4.oe2203sp1"/>
  <changelog author="Liu Yinsi &lt;liuyinsi@163.com&gt; - 1.13-3" date="1628078400">- fix format-truncation to support gcc 10</changelog>
  <changelog author="zouzhimin  &lt;zouzhimin@kylinos.cn&gt; - 1.20-1" date="1658750400">- update to 1.20-1</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1.20-2" date="1661256000">- Remove rpath</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1.20-3" date="1670587200">- Add /sbin/ldconfig to post and postun</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 1.20-4" date="1673870400">- Add link file for synamic library with "lib" prefix</changelog>
</package>
<package pkgid="4b17366bbb55d97bf9f7c7df8be1dd73bc0cea674010b6b1cb9e545cab093378" name="lcr" arch="src">
  <version epoch="0" ver="2.0.9" rel="10.oe2203sp1"/>
  <changelog author="wangrunze&lt;wangrunze13@huawei.com&gt; - 2.0.9-1" date="1671278400">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:update version to v2.0.9</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2.0.9-2" date="1676548800">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:Add loongarch64 support</changelog>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 2.0.9-3" date="1676980800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix update cpu-rt period failed and fix layer size type as int64</changelog>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 2.0.9-4" date="1682337600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:support update resources, remote-layer and files limit</changelog>
  <changelog author="suwei &lt;suwei@kylinsec.com.cn&gt; - 2.0.9-5" date="1691409600">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:add sw_64 support</changelog>
  <changelog author="jikai&lt;jikai11@huawei.com&gt; - 2.0.9-6" date="1694520000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix potential log error, empty pointer reference and overflow</changelog>
  <changelog author="jikai&lt;jikai11@huawei.com&gt; - 2.0.9-7" date="1695038400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:set env to avoid invoke lxc binary directly</changelog>
  <changelog author="jikai&lt;jikai11@huawei.com&gt; - 2.0.9-8" date="1702296000">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:sync from upstream</changelog>
  <changelog author="peng.zou &lt;peng.zou@shingroup.cn&gt; - 2.0.9-9" date="1706875200">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:add ppc64le support</changelog>
  <changelog author="jikai&lt;jikai11@huawei.com&gt; - 2.0.9-10" date="1718107200">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:sync from upstream</changelog>
</package>
<package pkgid="10c46eada907e1f6ebdc4a60454a4c8656d5b9b1faf839f2babe63ec6a79b058" name="lcr" arch="src">
  <version epoch="0" ver="2.0.9" rel="7.oe2203sp1"/>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 2.0.8-8" date="1667908800">- Type:feature
- CVE:NA
- SUG:NA
- DESC:Add sw64 architecture</changelog>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 2.0.8-9" date="1670328000">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:add macro to adapt musl libc and add add-gids option for exec</changelog>
  <changelog author="wangrunze&lt;wangrunze13@huawei.com&gt; - 2.0.8-10" date="1671278400">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:handle security warning and modify schema</changelog>
  <changelog author="wangrunze&lt;wangrunze13@huawei.com&gt; - 2.0.9-1" date="1671278401">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:update version to v2.0.9</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2.0.9-2" date="1676548800">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:Add loongarch64 support</changelog>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 2.0.9-3" date="1676980800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix update cpu-rt period failed and fix layer size type as int64</changelog>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 2.0.9-4" date="1682337600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:support update resources, remote-layer and files limit</changelog>
  <changelog author="suwei &lt;suwei@kylinsec.com.cn&gt; - 2.0.9-5" date="1691409600">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:add sw_64 support</changelog>
  <changelog author="jikai&lt;jikai11@huawei.com&gt; - 2.0.9-6" date="1694520000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix potential log error, empty pointer reference and overflow</changelog>
  <changelog author="jikai&lt;jikai11@huawei.com&gt; - 2.0.9-7" date="1695038400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:set env to avoid invoke lxc binary directly</changelog>
</package>
<package pkgid="2ba1fe7a44dc99af33d6f59329b90a031da47a025e0274cdb2f0f40bf6a54bcb" name="lcr" arch="src">
  <version epoch="0" ver="2.0.9" rel="8.oe2203sp1"/>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 2.0.8-9" date="1670328000">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:add macro to adapt musl libc and add add-gids option for exec</changelog>
  <changelog author="wangrunze&lt;wangrunze13@huawei.com&gt; - 2.0.8-10" date="1671278400">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:handle security warning and modify schema</changelog>
  <changelog author="wangrunze&lt;wangrunze13@huawei.com&gt; - 2.0.9-1" date="1671278401">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:update version to v2.0.9</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2.0.9-2" date="1676548800">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:Add loongarch64 support</changelog>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 2.0.9-3" date="1676980800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix update cpu-rt period failed and fix layer size type as int64</changelog>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 2.0.9-4" date="1682337600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:support update resources, remote-layer and files limit</changelog>
  <changelog author="suwei &lt;suwei@kylinsec.com.cn&gt; - 2.0.9-5" date="1691409600">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:add sw_64 support</changelog>
  <changelog author="jikai&lt;jikai11@huawei.com&gt; - 2.0.9-6" date="1694520000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix potential log error, empty pointer reference and overflow</changelog>
  <changelog author="jikai&lt;jikai11@huawei.com&gt; - 2.0.9-7" date="1695038400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:set env to avoid invoke lxc binary directly</changelog>
  <changelog author="jikai&lt;jikai11@huawei.com&gt; - 2.0.9-8" date="1702296000">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:sync from upstream</changelog>
</package>
<package pkgid="ba8b839df276f59e3ad12768ed691cffbcaf267e35d08a93a0c761f2cc834069" name="less" arch="src">
  <version epoch="0" ver="590" rel="4.oe2203sp1"/>
  <changelog author="fuanan &lt;fuanan3@huawei.com&gt; - 563-2" date="1622203200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:[add] backport patches from upstream
       Create only one ifile when a file is opened under different names.
       Remove extraneous frees, associated with removed call to lrealpath.
       Fix crash when call set_ifilename with a pointer to the name that is
       Remove unnecessary call to pshift in pappend.
       Reset horizontal shift when opening a new file.
       Protect from buffer overrun.
       Make histpattern return negative value to indicate error.
       Lesskey: don't translate ctrl-K in an EXTRA string.
       Ignore SIGTSTP in secure mode.
       Fix "Tag not found" error while looking for a tag's location
       Fix minor memory leak with input preprocessor.</changelog>
  <changelog author="chenyanpanHW &lt;chenyanpan@huawei.com&gt; - 563-3" date="1627646400">- DESC: delete -S git from autosetup, and delete BuildRequires git</changelog>
  <changelog author="wangjie &lt;wangjie375@huawei.com&gt; - 590-1" date="1639483200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:Update less to 590</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 590-2" date="1665662400">- DESC:fix the changelog exception macro</changelog>
  <changelog author="Eibz-Chan &lt;chenbingzhao@huawei.com&gt; - 590-3" date="1670587200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:[add] backport patches from upstream
	Fix-memory-leak-when-using-corrupt-lesshst-file.patch
	Fix-crash-when-enter-invaid-pattern-in-command.patch</changelog>
  <changelog author="hongjinghao &lt;hongjinghao@huawei.com&gt; - 590-4" date="1676548800">- fix CVE-2022-46663</changelog>
</package>
<package pkgid="31de32db2c17f55a64c8789305df0f888a5ba5eb2bb2e6bd608e7854526eb4bc" name="less" arch="src">
  <version epoch="0" ver="590" rel="5.oe2203sp1"/>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 590-2" date="1665662400">- DESC:fix the changelog exception macro</changelog>
  <changelog author="Eibz-Chan &lt;chenbingzhao@huawei.com&gt; - 590-3" date="1670587200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:[add] backport patches from upstream
	Fix-memory-leak-when-using-corrupt-lesshst-file.patch
	Fix-crash-when-enter-invaid-pattern-in-command.patch</changelog>
  <changelog author="hongjinghao &lt;hongjinghao@huawei.com&gt; - 590-4" date="1676548800">- fix CVE-2022-46663</changelog>
  <changelog author="liweigang &lt;izmirvii@gmail.com&gt; - 590-5" date="1708344000">- fix CVE-2022-48624</changelog>
</package>
<package pkgid="8c2f55a745001287ce4b4a450afd3ed6cff64e6179bdb898882a3cbdcbb56b1c" name="less" arch="src">
  <version epoch="0" ver="590" rel="6.oe2203sp1"/>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 590-2" date="1665662400">- DESC:fix the changelog exception macro</changelog>
  <changelog author="Eibz-Chan &lt;chenbingzhao@huawei.com&gt; - 590-3" date="1670587200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:[add] backport patches from upstream
	Fix-memory-leak-when-using-corrupt-lesshst-file.patch
	Fix-crash-when-enter-invaid-pattern-in-command.patch</changelog>
  <changelog author="hongjinghao &lt;hongjinghao@huawei.com&gt; - 590-4" date="1676548800">- fix CVE-2022-46663</changelog>
  <changelog author="liweigang &lt;izmirvii@gmail.com&gt; - 590-5" date="1708344000">- fix CVE-2022-48624</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 590-6" date="1713787200">- fix CVE-2024-32487</changelog>
</package>
<package pkgid="0dabbbbdf0e321715afe60a34401b7dc9298d514d4347d5bb000b4af6698cca6" name="libX11" arch="src">
  <version epoch="0" ver="1.7.2" rel="6.oe2203sp1"/>
  <changelog author="dongyuzhen &lt;dongyuzhen@huawei.com&gt; - 1.7.2-1" date="1638014400">- update to 1.7.2</changelog>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 1.7.2-2" date="1639569600">- provide XKBgeom header file</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 1.7.2-3" date="1655812800">- fix error from unkown X86FMacroxx keysym</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1.7.2-4" date="1666612800">- fix CVE-2022-3554,CVE-2022-3555</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 1.7.2-5" date="1667563200">- disable static library</changelog>
  <changelog author="liweigang &lt;liweiganga@uniontech.com&gt; - 1.7.2-6" date="1687176000">- fix CVE-2023-3138</changelog>
</package>
<package pkgid="fd3b416ae0c7fcff7572df03d7e027689e1a5145c571d663af24ead0f8615d3f" name="libX11" arch="src">
  <version epoch="0" ver="1.7.2" rel="8.oe2203sp1"/>
  <changelog author="dongyuzhen &lt;dongyuzhen@huawei.com&gt; - 1.7.2-1" date="1638014400">- update to 1.7.2</changelog>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 1.7.2-2" date="1639569600">- provide XKBgeom header file</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 1.7.2-3" date="1655812800">- fix error from unkown X86FMacroxx keysym</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1.7.2-4" date="1666612800">- fix CVE-2022-3554,CVE-2022-3555</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 1.7.2-5" date="1667563200">- disable static library</changelog>
  <changelog author="liweigang &lt;liweiganga@uniontech.com&gt; - 1.7.2-6" date="1687176000">- fix CVE-2023-3138</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1.7.2-8" date="1696420800">- Fix CVE-2023-43785, CVE-2023-43786, CVE-2023-43787
- Merge sw64 patch</changelog>
</package>
<package pkgid="22a0e73d13196d1f07bf66a1adbab6e1cf96bc660a3346b4afa72436dc1dc825" name="libXpm" arch="src">
  <version epoch="0" ver="3.5.13" rel="4.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 3.5.13-2" date="1666785600">- Rebuild for next release</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 3.5.13-3" date="1669377600">- update Correct tar file</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 3.5.13-4" date="1675252800">- fix CVE-2022-44617,CVE-2022-46285,CVE-2022-4883</changelog>
</package>
<package pkgid="9237c4dedf4b6fc1d936b501a71d0d15774f40eda3da9af0374b75cec0709476" name="libXpm" arch="src">
  <version epoch="0" ver="3.5.13" rel="5.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 3.5.13-2" date="1666785600">- Rebuild for next release</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 3.5.13-3" date="1669377600">- update Correct tar file</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 3.5.13-4" date="1675252800">- fix CVE-2022-44617,CVE-2022-46285,CVE-2022-4883</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 3.5.13-5" date="1696420800">- Add patches harden CVE-2023-43786, CVE-2023-43787
- Fix CVE-2023-43788, CVE-2023-43789</changelog>
</package>
<package pkgid="e9cbf72b4bceb763f6070868ff0de96b2986262032372475a2e0cc38c9c78018" name="libXxf86vm" arch="src">
  <version epoch="0" ver="1.1.5" rel="2.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1.1.5-1" date="1667476800">- update 1.1.5</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1.1.5-2" date="1677326400">- disable static library</changelog>
</package>
<package pkgid="5111968b2b2236af266daec090ddb08806833e887ea686759853c1d3a39c8830" name="libarchive" arch="src">
  <version epoch="0" ver="3.5.2" rel="6.oe2203sp1"/>
  <changelog author="yangcheng &lt;yagcheng87@huawei.com&gt; - 3.5.1-2" date="1634212800">- Type:CVE
- ID:CVE-2021-36976
- SUG:NA
- DESC:fix CVE-2021-36976</changelog>
  <changelog author="xingxing &lt;xingxing@huawei.com&gt; - 3.5.2-1" date="1637928000">- Upgrade to version 3.5.2</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-paetners.com&gt; - 3.5.2-2" date="1648296000">- Eanable make check</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-paetners.com&gt; - 3.5.2-3" date="1649505600">- fix CVE-2021-36976,CVE-2021-31566,fix fuzz test</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-paetners.com&gt; - 3.5.2-4" date="1656936000">- fix CVE-2022-26280</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-paetners.com&gt; - 3.5.2-5" date="1669377600">- fix CVE-2022-36227</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-paetners.com&gt; - 3.5.2-6" date="1677758400">- fix CVE-2021-36976 patch</changelog>
</package>
<package pkgid="2f14e012552c8041ea6fc8bf51419731379f03cee5928f8d0dc1f6deabef7fec" name="libarchive" arch="src">
  <version epoch="0" ver="3.5.2" rel="7.oe2203sp1"/>
  <changelog author="wangkerong &lt;wangkerong@h-paetners.com&gt; - 3.5.2-4" date="1656936000">- fix CVE-2022-26280</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-paetners.com&gt; - 3.5.2-5" date="1669377600">- fix CVE-2022-36227</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-paetners.com&gt; - 3.5.2-6" date="1677758400">- fix CVE-2021-36976 patch</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 3.5.2-7" date="1717675200">- Type:CVE
- ID:CVE-2024-20696
- SUG:NA
- DESC:fix CVE-2024-20696</changelog>
</package>
<package pkgid="a39bc88632a89f5337966d795c7fd4227b23d2b09ab86ea8d66230a353e6c230" name="libblockdev" arch="src">
  <version epoch="0" ver="2.26" rel="4.oe2203sp1"/>
  <changelog author="Hongtao Zhang &lt;zhanghongtao22@huawei.com&gt; - 2.26-2" date="1655294400">- Add BuildRequire make</changelog>
  <changelog author="wangzhiqiang &lt;wangzhiqiang95@huawei.com&gt; - 2.26-3" date="1679486400">- remove require dmraid and kmod-kvdo</changelog>
  <changelog author="liyanan &lt;liyana61@h-partners.com&gt; - 2.26-4" date="1704196800">- remove require vdo</changelog>
</package>
<package pkgid="7f50917726413874c9b1604e0ac6c34b43aae6bf66b6ed33aca76eedb094ee79" name="libbpf" arch="src">
  <version epoch="2" ver="0.8.1" rel="10.oe2203sp1"/>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 2:0.8.1-1" date="1667908800">- update libbpf from v0.3 to v0.8.1</changelog>
  <changelog author="zhangmingyi &lt;zhangmingyi@huawei.com&gt; -2:0.8.1-2" date="1669464000">- libbpf.spec - modify Source address</changelog>
  <changelog author="zhangmingyi&lt;zhangmingyi5@huawei.com&gt; - 2:0.8.1-3" date="1673006400">-- backporting: backport-libbpf-Ensure-functions-with-always_inline-attribute-are-inline.patch 
                backport-libbpf-Fix-the-name-of-a-reused-map.patch
                backport-libbpf-preserve-errno-across-pr_warn-pr_info-pr_debug.patch</changelog>
  <changelog author="JofDiamonds &lt;kwb0523@163.com&gt; -2:0.8.1-4" date="1677153600">- backport patches from upstream:
  backport-libbpf-Fix-overrun-in-netlink-attribute-iteration.patch
  backport-libbpf-Fix-use-after-free-in-btf_dump_name_dups.patch
  backport-libbpf-Deal-with-section-with-no-data-gracefully.patch
  backport-libbpf-Fix-null-pointer-dereference-in-find_prog_by_.patch
  backport-sync-start-syncing-include-uapi-linux-fcntl.h-UAPI-h.patch
  backport-libbpf-Handle-size-overflow-for-ringbuf-mmap.patch
  backport-libbpf-Use-page-size-as-max_entries-when-probing-rin.patch</changelog>
  <changelog author="zhangmingyi &lt;zhangmingyi5@huawei.com&gt; -2:0.8.1-5" date="1683201600">- add -Werror -Wl,-z,noexecstack options</changelog>
  <changelog author="SuperCharge &lt;xiesongyang@huawei.com&gt; -2:0.8.1-6" date="1683201601">- backport patches from upstream:
  backport-libbpf-Fix-alen-calculation-in-libbpf_nla_dump_error.patch</changelog>
  <changelog author="zhangmingyi &lt;zhangmingyi5@huawei.com&gt; -2:0.8.1-7" date="1683892800">- backport patches from upstream:
  backport-libbpf-Disable-SEC-pragma-macro-on-GCC.patch</changelog>
  <changelog author="zhangmingyi &lt;zhangmingyi5@huawei.com&gt; -2:0.8.1-8" date="1683979200">- backport patches from upstream:
  backport-libbpf-disassociate-section-handler-on-explicit-bpf_.patch
  backport-libbpf-Use-correct-return-pointer-in-attach_raw_tp.patch
  backport-libbpf-Use-elf_getshdrnum-instead-of-e_shnum.patch</changelog>
  <changelog author="zhangmingyi &lt;zhangmingyi5@huawei.com&gt; 2:0.8.1-9" date="1692014400">- backport patches from upstream:
  backport-libbpf-Ensure-FD-3-during-bpf_map__reuse_fd.patch
  backport-libbpf-Ensure-libbpf-always-opens-files-with-O_CLOEX.patch</changelog>
  <changelog author="zhangmingyi &lt;zhangmingyi5@huawei.com&gt; 2:0.8.1-10" date="1701950400">- backport patches from upstream:
  backport-libbpf-Fix-realloc-API-handling-in-zero-sized-edge-cases.patch
  backport-libbpf-Set-close-on-exec-flag-on-gzopen.patch
  backport-libbpf-Fix-is_pow_of_2.patch
  backport-libbpf-make-RINGBUF-map-size-adjustments-more-eagerly.patch</changelog>
</package>
<package pkgid="5dcc08fcacaa29c8eff0a2cda3266c37972d8402445f628c5a865b625dc21725" name="libbpf" arch="src">
  <version epoch="2" ver="0.8.1" rel="3.oe2203sp1"/>
  <changelog author="sunsuwan &lt;sunsuwan2@huawei.com&gt; - 2:0.3-1" date="1640692800">- update libbpf from v0.1.1 to v0.3</changelog>
  <changelog author="hujiawang &lt;hujiawang1@huawei.com&gt; - 2:0.3-2" date="1661169600">- change the package name</changelog>
  <changelog author="zhangmingyi &lt;zhangmingyi5@huawei.com&gt; - 2:0.3-3" date="1666785600">- Fix determine_ptr_size() guessing</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 2:0.8.1-1" date="1667908800">- update libbpf from v0.3 to v0.8.1</changelog>
  <changelog author="zhangmingyi &lt;zhangmingyi@huawei.com&gt; -2:0.8.1-2" date="1669464000">- libbpf.spec - modify Source address</changelog>
  <changelog author="zhangmingyi&lt;zhangmingyi5@huawei.com&gt; - 2:0.8.1-3" date="1673006400">-- backporting: backport-libbpf-Ensure-functions-with-always_inline-attribute-are-inline.patch 
                backport-libbpf-Fix-the-name-of-a-reused-map.patch
                backport-libbpf-preserve-errno-across-pr_warn-pr_info-pr_debug.patch</changelog>
</package>
<package pkgid="f41d199a8839d05a2c8903cec9261a9848b37eeb324829ab7cc42e53f915cb87" name="libbpf" arch="src">
  <version epoch="2" ver="0.8.1" rel="9.oe2203sp1"/>
  <changelog author="zhangmingyi &lt;zhangmingyi5@huawei.com&gt; - 2:0.3-3" date="1666785600">- Fix determine_ptr_size() guessing</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 2:0.8.1-1" date="1667908800">- update libbpf from v0.3 to v0.8.1</changelog>
  <changelog author="zhangmingyi &lt;zhangmingyi@huawei.com&gt; -2:0.8.1-2" date="1669464000">- libbpf.spec - modify Source address</changelog>
  <changelog author="zhangmingyi&lt;zhangmingyi5@huawei.com&gt; - 2:0.8.1-3" date="1673006400">-- backporting: backport-libbpf-Ensure-functions-with-always_inline-attribute-are-inline.patch 
                backport-libbpf-Fix-the-name-of-a-reused-map.patch
                backport-libbpf-preserve-errno-across-pr_warn-pr_info-pr_debug.patch</changelog>
  <changelog author="JofDiamonds &lt;kwb0523@163.com&gt; -2:0.8.1-4" date="1677153600">- backport patches from upstream:
  backport-libbpf-Fix-overrun-in-netlink-attribute-iteration.patch
  backport-libbpf-Fix-use-after-free-in-btf_dump_name_dups.patch
  backport-libbpf-Deal-with-section-with-no-data-gracefully.patch
  backport-libbpf-Fix-null-pointer-dereference-in-find_prog_by_.patch
  backport-sync-start-syncing-include-uapi-linux-fcntl.h-UAPI-h.patch
  backport-libbpf-Handle-size-overflow-for-ringbuf-mmap.patch
  backport-libbpf-Use-page-size-as-max_entries-when-probing-rin.patch</changelog>
  <changelog author="zhangmingyi &lt;zhangmingyi5@huawei.com&gt; -2:0.8.1-5" date="1683201600">- add -Werror -Wl,-z,noexecstack options</changelog>
  <changelog author="SuperCharge &lt;xiesongyang@huawei.com&gt; -2:0.8.1-6" date="1683201601">- backport patches from upstream:
  backport-libbpf-Fix-alen-calculation-in-libbpf_nla_dump_error.patch</changelog>
  <changelog author="zhangmingyi &lt;zhangmingyi5@huawei.com&gt; -2:0.8.1-7" date="1683892800">- backport patches from upstream:
  backport-libbpf-Disable-SEC-pragma-macro-on-GCC.patch</changelog>
  <changelog author="zhangmingyi &lt;zhangmingyi5@huawei.com&gt; -2:0.8.1-8" date="1683979200">- backport patches from upstream:
  backport-libbpf-disassociate-section-handler-on-explicit-bpf_.patch
  backport-libbpf-Use-correct-return-pointer-in-attach_raw_tp.patch
  backport-libbpf-Use-elf_getshdrnum-instead-of-e_shnum.patch</changelog>
  <changelog author="zhangmingyi &lt;zhangmingyi5@huawei.com&gt; 2:0.8.1-9" date="1692014400">- backport patches from upstream:
  backport-libbpf-Ensure-FD-3-during-bpf_map__reuse_fd.patch
  backport-libbpf-Ensure-libbpf-always-opens-files-with-O_CLOEX.patch</changelog>
</package>
<package pkgid="d35fce6bfd6754f8fc6c476365bbf6c8f1f409ae95b93e25d978339145fe2135" name="libcap" arch="src">
  <version epoch="0" ver="2.61" rel="5.oe2203sp1"/>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 2.32-3" date="1636372800">- capsh better error handling for integer parsing
- setcap clean up error handling of the ns rootid argument</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 2.61-1" date="1637841600">- update to 2.61</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 2.61-2" date="1661601600">- fix syntax error in DEBUG protected setcap.c code</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 2.61-3" date="1665576000">- backport upstream patches</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 2.61-4" date="1667304000">- backport upstream patch</changelog>
  <changelog author="ExtinctFire &lt;shenyining_00@126.com&gt; - 2.61-5" date="1685534400">- fix CVE-2023-2602/CVE-2023-2603 &amp;&amp; fix memory leaks</changelog>
</package>
<package pkgid="d25720d938a020be5f7cbf0428845479c44b9776d419c6ea1a4c7336c464fad7" name="libcgroup" arch="src">
  <version epoch="0" ver="2.0.3" rel="1.oe2203sp1"/>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 2.0.3-1" date="1675944000">- Type: upgrade
- Id:NA
- SUG:NA
- DESC:update release version to v2.0.3</changelog>
</package>
<package pkgid="463e36da9ffeb37eec44f1c77b30758e227692d1459252233f62395ac75c87b2" name="libdnet" arch="src">
  <version epoch="0" ver="1.14" rel="4.oe2203sp1"/>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 1.14-2" date="1667304000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: fix Potential Null Pointer Dereference</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 1.14-3" date="1668772800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: add Obsoletes '&lt; version' in spec</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.14-4" date="1677585600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: delete *.a file</changelog>
</package>
<package pkgid="77437fa89565c3a5a8c6681ed5711bb3e6774e944b75714fe8480f8ed994e7b9" name="libdnf" arch="src">
  <version epoch="0" ver="0.69.0" rel="4.oe2203sp1"/>
  <changelog author="seuzw &lt;930zhaowei@163.com&gt; - 0.48.0-2" date="1623153600">- Type:CVE
- ID:CVE-2021-3445
- SUG:NA
- DESC:fix CVE-2021-3445</changelog>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 0.48.0-3" date="1626350400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:dnf and libdnf upgrade downgrade together</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.65.0-1" date="1640433600">- DESC:upgrade to libdnf-0.65.0</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.65.0-2" date="1640692800">- DESC:fix libdnf upgrade failed</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.65.0-3" date="1663675200">- DESC:backport patches fix listing a repository without cpeid</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-1" date="1667649600">- DES:Update libdnf to 0.69.0</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-2" date="1670587200">- DESC:backport patch to ensure reldep is from the same sack</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-3" date="1672920000">- DESC:add loongarch</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-4" date="1682078400">- DESC:add check after malloc allocation</changelog>
</package>
<package pkgid="a25ebc910a816afda09b75fdbbc7f04c0928cfd79c9449e02d3a03b7409dd6a7" name="libdnf" arch="src">
  <version epoch="0" ver="0.69.0" rel="5.oe2203sp1"/>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 0.48.0-3" date="1626350400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:dnf and libdnf upgrade downgrade together</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.65.0-1" date="1640433600">- DESC:upgrade to libdnf-0.65.0</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.65.0-2" date="1640692800">- DESC:fix libdnf upgrade failed</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.65.0-3" date="1663675200">- DESC:backport patches fix listing a repository without cpeid</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-1" date="1667649600">- DES:Update libdnf to 0.69.0</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-2" date="1670587200">- DESC:backport patch to ensure reldep is from the same sack</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-3" date="1672920000">- DESC:add loongarch</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-4" date="1682078400">- DESC:add check after malloc allocation</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 0.69.0-5" date="1687867200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:libdnf:fix libdnf no downgrade when downgrade dnf</changelog>
</package>
<package pkgid="b323fe19444d73ee6a8c854c42557b025f060bc0459eefab7ac83144466e0990" name="libdnf" arch="src">
  <version epoch="0" ver="0.69.0" rel="6.oe2203sp1"/>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.65.0-1" date="1640433600">- DESC:upgrade to libdnf-0.65.0</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.65.0-2" date="1640692800">- DESC:fix libdnf upgrade failed</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.65.0-3" date="1663675200">- DESC:backport patches fix listing a repository without cpeid</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-1" date="1667649600">- DES:Update libdnf to 0.69.0</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-2" date="1670587200">- DESC:backport patch to ensure reldep is from the same sack</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-3" date="1672920000">- DESC:add loongarch</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-4" date="1682078400">- DESC:add check after malloc allocation</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 0.69.0-5" date="1687867200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:libdnf:fix libdnf no downgrade when downgrade dnf</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 0.69.0-6" date="1691841600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Disconnect monitors in `dnf_repo_loader_finalize()`</changelog>
</package>
<package pkgid="8ea3749de200a83a0a34afe13aa4575814db360579b88bcce60442ff6ecf3bd2" name="libdnf" arch="src">
  <version epoch="0" ver="0.69.0" rel="7.oe2203sp1"/>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.65.0-3" date="1663675200">- DESC:backport patches fix listing a repository without cpeid</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-1" date="1667649600">- DES:Update libdnf to 0.69.0</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-2" date="1670587200">- DESC:backport patch to ensure reldep is from the same sack</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-3" date="1672920000">- DESC:add loongarch</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-4" date="1682078400">- DESC:add check after malloc allocation</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 0.69.0-5" date="1687867200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:libdnf:fix libdnf no downgrade when downgrade dnf</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 0.69.0-6" date="1691841600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Disconnect monitors in `dnf_repo_loader_finalize()`</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 0.69.0-7" date="1703851200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:libdnf:Avoid reinstalling installonly packages marked for ERASE
              Fix utimes error message in dnf-repo
              Do not download repository if our local cache is up to date in dnf-repo
              python bindings:Load all modules with RTLD_GLOBAL</changelog>
</package>
<package pkgid="0095d943cb70ce924a6128d508e95b3575fdb59c60c5a9948579eb437d7ac348" name="libdnf" arch="src">
  <version epoch="0" ver="0.69.0" rel="8.oe2203sp1"/>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.65.0-3" date="1663675200">- DESC:backport patches fix listing a repository without cpeid</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-1" date="1667649600">- DES:Update libdnf to 0.69.0</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-2" date="1670587200">- DESC:backport patch to ensure reldep is from the same sack</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-3" date="1672920000">- DESC:add loongarch</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-4" date="1682078400">- DESC:add check after malloc allocation</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 0.69.0-5" date="1687867200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:libdnf:fix libdnf no downgrade when downgrade dnf</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 0.69.0-6" date="1691841600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Disconnect monitors in `dnf_repo_loader_finalize()`</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 0.69.0-7" date="1703851200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:libdnf:Avoid reinstalling installonly packages marked for ERASE
              Fix utimes error message in dnf-repo
              Do not download repository if our local cache is up to date in dnf-repo
              python bindings:Load all modules with RTLD_GLOBAL</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@kylinsec.com.cn&gt; - 0.69.0-8" date="1705320000">- Modify loongarch64 patch use all arch</changelog>
</package>
<package pkgid="41ca7f3eeb4e81f5856a962fe54eef9f238b877d0e9898722625baa2a8af2f2c" name="libdwarf" arch="src">
  <version epoch="1" ver="0.9.1" rel="1.oe2203sp1"/>
  <changelog author="panys&lt;panyanshuang@nati-gba.cn&gt; - 20210528-1" date="1658836800">- upgrade to version 20210528</changelog>
  <changelog author="liyanan &lt;thistleslyn@163.com&gt; - 0.7.0-1" date="1686830400">- Update to 0.7.0</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:0.9.1-1" date="1711368000">- Update to 0.9.1 and fix CVE-2024-2002</changelog>
</package>
<package pkgid="17dfb2a2fe1bac46f8062a6e083b8024d1db4a1a03b62af03ef61d171dbbee93" name="libexif" arch="src">
  <version epoch="0" ver="0.6.22" rel="5.oe2203sp1"/>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 0.6.22-3" date="1666094400">- fix fuzz test error</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.6.22-4" date="1692878400">- fix typo in changelog</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.6.22-5" date="1705320000">- fix CVE-2020-0452</changelog>
</package>
<package pkgid="7227603159435136f40f41bed0b76cd810a5e290d9a45b3d6b57bfba05341c41" name="libfastjson" arch="src">
  <version epoch="0" ver="0.99.9" rel="3.oe2203sp1"/>
  <changelog author="panxiaohe&lt;panxiaohe@huawei.com&gt; - 0.99.9-1" date="1638273600">- update to 0.99.9</changelog>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 0.99.9-2" date="1662638400">- fix obsoletes in spec</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 0.99.9-3" date="1680004800">- fix CVE-2020-12762</changelog>
</package>
<package pkgid="b640be8a3f91134a9c006ea45e65e346d70645704b5cc7c9896b7e031a051815" name="libgit2" arch="src">
  <version epoch="0" ver="1.3.2" rel="2.oe2203sp1"/>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt; - 0.27.8-5" date="1652443200">- Remove error-prone, redundant test</changelog>
  <changelog author="xu_ping &lt;xuping33@h-partners.com&gt; - 1.3.2-1" date="1658750400">- Upgrade 1.3.2</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.3.2-2" date="1702555200">- Fix CVE-2023-22742</changelog>
</package>
<package pkgid="97a0dd5be3d5e650798d564a3942932e162713cbb4105f2d0bd846a3fc5e8cd9" name="libgit2" arch="src">
  <version epoch="0" ver="1.3.2" rel="3.oe2203sp1"/>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt; - 0.27.8-5" date="1652443200">- Remove error-prone, redundant test</changelog>
  <changelog author="xu_ping &lt;xuping33@h-partners.com&gt; - 1.3.2-1" date="1658750400">- Upgrade 1.3.2</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.3.2-2" date="1702555200">- Fix CVE-2023-22742</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1.3.2-3" date="1707307200">- Fix CVE-2024-24577</changelog>
</package>
<package pkgid="ecfbabcfb986d6e19395eed1f96d6c04eeddf8d5c69baf7b82943cb49079372f" name="libkae" arch="src">
  <version epoch="0" ver="1.2.10" rel="5.oe2203sp1"/>
  <changelog author="jinbinhua &lt;jinbinhua@huawei.com&gt; 1.2.7-1" date="1578398400">- First Spec Version Include kunpeng_engine Code</changelog>
  <changelog author="catastrowings &lt;jianghuhao1994@163.com&gt; 1.2.10-2" date="1583236800">- openEuler init</changelog>
  <changelog author="zhangtao &lt;zhangtao221@huawei.com&gt; 1.2.10-3" date="1584273600">- Specify aarch64 compilation</changelog>
  <changelog author="lingsheng &lt;lingsheng@huawei.com&gt; 1.2.10-4" date="1595937600">- Check glibc version to avoid redefine gettid()</changelog>
  <changelog author="caodongxia &lt;caodongxia@huawei.com&gt; 1.2.10-5" date="1628769600">- Fix pthread_yield is deprecated</changelog>
</package>
<package pkgid="31a9660110cb121df628e81b839d825ed33251843eb172a9f6997f287219c59a" name="libkcapi" arch="src">
  <version epoch="0" ver="1.3.1" rel="7.oe2203sp1"/>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.3.1-1" date="1638273600">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:Update to 1.3.1</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.3.1-2" date="1643198400">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable test suite in check</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.3.1-3" date="1645272000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Fix printf usage errors highlighted by covscan</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.3.1-4" date="1651838400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete duplicate files from libkcapi-help</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.3.1-5" date="1657713600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add macro to control docbook-utils-pdf dependency</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.3.1-6" date="1669291200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:simplified control macro</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.3.1-7" date="1682683200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:calculate hmac file after installing for binary</changelog>
</package>
<package pkgid="6da1b7a77d3a7b1691621cced8f3cd635c82a7f8b04621e538e4a07bd7461dd2" name="libksba" arch="src">
  <version epoch="0" ver="1.6.0" rel="3.oe2203sp1"/>
  <changelog author="lirui &lt;lirui130@huawei.com&gt; - 1.5.0-1" date="1611230400">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:update version to 1.5.0</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.6.0-1" date="1638273600">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:update version to 1.6.0</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.6.0-2" date="1666180800">- Type:cve
- ID:CVE-2022-3515
- SUG:NA
- DESC:fix CVE-2022-3515</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.6.0-3" date="1671710400">- Type:cve
- ID:CVE-2022-47629
- SUG:NA
- DESC:fix CVE-2022-47629</changelog>
</package>
<package pkgid="b1b9b953a3c2615d8ee8fc8079e162584c5cf5adcd4db1c5bec8a24b88e84007" name="libldb" arch="src">
  <version epoch="0" ver="2.6.1" rel="2.oe2203sp1"/>
  <changelog author="lijingyuan &lt;lijingyuan3@huawei.com&gt; - 2.1.4-3" date="1626696000">- Type:requirement
- ID:NA
- SUG:NA
- DESC:cancel gdb in buildrequires</changelog>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 2.1.4-4" date="1631016000">- Type:requirement
- ID:NA
- SUG:NA
- DESC:remove rpath of libldb's binary files</changelog>
  <changelog author="yanglu &lt;yanglu72@huawei.com&gt; - 2.4.1-1" date="1639569600">- Type:update
- ID:NA
- SUG:NA
- DESC:update to 2.4.1</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 2.4.1-2" date="1659355200">- Type:CVE
- ID:CVE-2022-32746
- SUG:NA
- DESC:fix CVE-2022-32746</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 2.6.1-1" date="1667563200">- Type:requirement
- ID:NA
- SUG:NA
- DESC:update libldb version to 2.6.1</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.1-2" date="1680350400">- Type:CVE
- ID:CVE-2023-0614
- SUG:NA
- DESC:fix CVE-2023-0614</changelog>
</package>
<package pkgid="0d171ae4a7b2dd551d57878d71831e5fe8e259fab60359b262fea99a6027e26b" name="liblouis" arch="src">
  <version epoch="0" ver="3.7.0" rel="5.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 3.7.0-5" date="1679486400">- Fix CVE-2023-26769</changelog>
</package>
<package pkgid="a1498dc31441bf5fd1727f0563649d422c4a40b5ea84f690fd3e421fbda49b8e" name="liblouis" arch="src">
  <version epoch="0" ver="3.7.0" rel="6.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 3.7.0-5" date="1679486400">- Fix CVE-2023-26769</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.7.0-6" date="1702296000">- Fix CVE-2022-26981,CVE-2022-31783,CVE-2023-26767,CVE-2023-26768</changelog>
</package>
<package pkgid="93ff580f7eec57a2d4dd3cb5149271debdaa306b1bb1df775fa4595cdee11f35" name="libmediaart" arch="src">
  <version epoch="0" ver="1.9.6" rel="2.oe2203sp1"/>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 1.9.6-2" date="1727179200">- Added 'Buildarch: noarch' to the help subpackage.</changelog>
</package>
<package pkgid="d61c0b75383c89ea62ec51cb6750014d3fb2ab7d297cbcf8af5b8ddf1171d932" name="libmicrohttpd" arch="src">
  <version epoch="1" ver="0.9.75" rel="4.oe2203sp1"/>
  <changelog author="caodongxia&lt;caodongxia@huawei.com&gt; - 0.9.59-5" date="1628164800">- Fix libmicrohttpd-tutorial info</changelog>
  <changelog author="xigaoxinyan&lt;xigaoxinyan@huawei.com&gt; - 0.9.75-1" date="1642161600">- update to 0.9.75</changelog>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt; - 1:0.9.75-2" date="1659700800">- Fixed missing websocket.inc in dist files</changelog>
  <changelog author="wulei &lt;wulei80@h-partners.com&gt; - 1:0.9.75-3" date="1661601600">- Fixed missing websocket.inc in dist files</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:0.9.75-4" date="1678708800">- Fix CVE-2023-27371</changelog>
</package>
<package pkgid="08a0dcd5da835f61a7f4e5c3ed725f9c1fac4adb52290b05dbce76c2b6564e38" name="libndp" arch="src">
  <version epoch="0" ver="1.8" rel="3.oe2203sp1"/>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.8-2" date="1666353600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add make as BuildRequires for local rpmbuild</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 1.8-3" date="1718107200">- Type:CVE
- ID:CVE-2024-5564
- SUG:NA
- DESC:fix CVE-2024-5564</changelog>
</package>
<package pkgid="3d007d272d18c476b0885c654194a3660ea0c5c41fe48d521c80bf270de9955a" name="libnet" arch="src">
  <version epoch="0" ver="1.2" rel="3.oe2203sp1"/>
  <changelog author="liukuo &lt;liukuo@kylinos.cn&gt; - 1.2-2" date="1659700800">- License compliance rectification</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1.2-3" date="1717588800">- delete redundant files</changelog>
</package>
<package pkgid="67d53cb3e3d329c7a248aa21af49d23a39462bb314ec6868d6e5e440bb2a78f1" name="libnetfilter_conntrack" arch="src">
  <version epoch="0" ver="1.0.8" rel="6.oe2203sp1"/>
  <changelog author="seuzw &lt;930zhaowei@163.com&gt; - 1.0.8-3" date="1663070400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:enable test</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.0.8-4" date="1663675200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:remove filter tests</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 1.0.8-5" date="1669636800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add make as BuildRequires for rpmbuild</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 1.0.8-6" date="1698408000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync uapi header with nf next</changelog>
</package>
<package pkgid="35adacfa27e9a09fe53ff60279b03de65e8d6b7ad56468c9c009f911ec05a5a8" name="libpcap" arch="src">
  <version epoch="14" ver="1.10.1" rel="4.oe2203sp1"/>
  <changelog author="xingwei14 &lt;xingwei14@h-partners.com&gt; - 14:1.10.1-4" date="1726747200">- Type:CVE
- CVE:CVE-2023-7256 CVE-2024-8006
- SUG:NA
- DESC:fix CVE-2023-7256 and CVE-2024-8006</changelog>
</package>
<package pkgid="59303447f8074912975c629967652dc415965657adcc54e8573e6ac62a63e30d" name="libpq" arch="src">
  <version epoch="0" ver="13.12" rel="1.oe2203sp1"/>
  <changelog author="yangweidong &lt;yangweidong9@huawei.com&gt; - 11.16-1" date="1652961600">- Upgrade libpq to 11.16, fix CVES: CVE-2021-32028 CVE-2021-3677 CVE-2021-23222</changelog>
  <changelog author="duyiwei &lt;duyiwei@kylinos.cn&gt; - 13.7-1" date="1655121600">- upgrade libpq to 13.7,fix CVE-2021-32027,CVE-2022-1552</changelog>
  <changelog author="huajingyun &lt;huajingyun@loongson.cn&gt; - 13.7-2" date="1669896000">- add loongarch support</changelog>
  <changelog author="suwei &lt;suwei@kylinsec.com.cn&gt; - 13.7-3" date="1692014400">- Fix sw_64 build error</changelog>
  <changelog author="ZhengZhenyu &lt;zhengzhenyu@openeuler.sh&gt; - 13.12-1" date="1693483200">- Bump to 13.12 to fix CVEs</changelog>
</package>
<package pkgid="da018cb77b9bbec92eed9dd3157f84b1ef534fcf4577fb1e983fd78476510c3d" name="libpwquality" arch="src">
  <version epoch="0" ver="1.4.4" rel="5.oe2203sp1"/>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.4.4-3" date="1660132800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix doc about difok</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.4.4-4" date="1661256000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:change the files order in patch file fix-doc-about-difok.patch</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.4.4-5" date="1719921600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:backport upstream patch to fix maxclassrepeat=1</changelog>
</package>
<package pkgid="f57b760757c9c2ea6d32db5cc6b2281105879edbb036eee974a05ab2fb26b1d2" name="librabbitmq" arch="src">
  <version epoch="0" ver="0.9.0" rel="9.oe2203sp1"/>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 0.9.0-6" date="1666785600">- Add sw64 architecture</changelog>
  <changelog author="mengwenhua &lt;mengwenhua@xfusion.com&gt; - 0.9.0-7" date="1673006400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix instructions for default build</changelog>
  <changelog author="mengwenhua &lt;mengwenhua@xfusion.com&gt; - 0.9.0-8" date="1673092800">- OpenSSL should ignore missing config file</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 0.9.0-9" date="1688126400">- Fix CVE-2023-35789</changelog>
</package>
<package pkgid="4fe5bd85602e414891c0ed9ec7e9835e341485d9acc8d6dc4f9627a12e52176a" name="libreswan" arch="src">
  <version epoch="0" ver="4.11" rel="1.oe2203sp1"/>
  <changelog author="caodongxia &lt;caodongxia@huawei.com&gt; - 4.5-1" date="1641988800">- Update to 4.5</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 4.5-2" date="1656417600">- Fix CVE-2022-23094</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 4.5-3" date="1678190400">- Fix CVE-2023-23009</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 4.11-1" date="1685448000">- Update to 4.11 for fix CVE-2023-30570</changelog>
</package>
<package pkgid="3ad4c3206ca27d1e86c502a47ad9e9028ff37f93bfe8256ba891f18117b07c05" name="libreswan" arch="src">
  <version epoch="0" ver="4.12" rel="1.oe2203sp1"/>
  <changelog author="caodongxia &lt;caodongxia@huawei.com&gt; - 4.5-1" date="1641988800">- Update to 4.5</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 4.5-2" date="1656417600">- Fix CVE-2022-23094</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 4.5-3" date="1678190400">- Fix CVE-2023-23009</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 4.11-1" date="1685448000">- Update to 4.11 for fix CVE-2023-30570</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 4.12-1" date="1691841600">- Update to 4.12 for CVE-2023-38710, CVE-2023-38711 and CVE-2023-38712</changelog>
</package>
<package pkgid="b2407fb54cc853e56b3c96a0b611def6b330cec7a78dd5de6c53a63b700d5041" name="libreswan" arch="src">
  <version epoch="0" ver="4.14" rel="1.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 4.5-2" date="1656417600">- Fix CVE-2022-23094</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 4.5-3" date="1678190400">- Fix CVE-2023-23009</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 4.11-1" date="1685448000">- Update to 4.11 for fix CVE-2023-30570</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 4.12-1" date="1691841600">- Update to 4.12 for CVE-2023-38710, CVE-2023-38711 and CVE-2023-38712</changelog>
  <changelog author="suwei &lt;suwei@kylinsec.com.cn&gt; - 4.12-2" date="1692014400">- Add loongarch64 support</changelog>
  <changelog author="penghaitao &lt;htpengc@isoftstone.com&gt; - 4.12-3" date="1694433600">- Fix build error of 3000-Add-loongarch64-support.patch</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 4.14-1" date="1711454400">- Upgrade to 4.14 for fix CVE-2024-2357</changelog>
</package>
<package pkgid="0aa14070895c3418c9a009fab92dbff3a838a6b8e6e5078de2259d9c597000ea" name="libreswan" arch="src">
  <version epoch="0" ver="4.15" rel="1.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 4.5-2" date="1656417600">- Fix CVE-2022-23094</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 4.5-3" date="1678190400">- Fix CVE-2023-23009</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 4.11-1" date="1685448000">- Update to 4.11 for fix CVE-2023-30570</changelog>
  <changelog author="yangbo &lt;yangbo1@xfusion.com&gt; - 4.11-2" date="1686744000">- Fix '\n' of the linux_variant</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 4.12-1" date="1691841600">- Update to 4.12 for CVE-2023-38710, CVE-2023-38711 and CVE-2023-38712</changelog>
  <changelog author="suwei &lt;suwei@kylinsec.com.cn&gt; - 4.12-2" date="1692014400">- Add loongarch64 support</changelog>
  <changelog author="penghaitao &lt;htpengc@isoftstone.com&gt; - 4.12-3" date="1694433600">- Fix build error of 3000-Add-loongarch64-support.patch</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 4.14-1" date="1711454400">- Upgrade to 4.14 for fix CVE-2024-2357</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 4.15-1" date="1714478400">- Update to 4.15 for fix CVE-2024-3652</changelog>
</package>
<package pkgid="6521adb47aa823c19a97f4a3415d0afd295f76bd900ac01678dfe9a4278fc6d1" name="libreswan" arch="src">
  <version epoch="0" ver="4.5" rel="3.oe2203sp1"/>
  <changelog author="caodongxia &lt;caodongxia@huawei.com&gt; - 4.5-1" date="1641988800">- Update to 4.5</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 4.5-2" date="1656417600">- Fix CVE-2022-23094</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 4.5-3" date="1678190400">- Fix CVE-2023-23009</changelog>
</package>
<package pkgid="a31f599aacfe72c8b7377757b20a4b00005520d50a38c19be70f27e5d11429d8" name="librsvg2" arch="src">
  <version epoch="0" ver="2.50.5" rel="6.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 2.50.5-3" date="1666785600">- Rebuild for next release</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2.50.5-4" date="1673006400">- add loongarch64 support for librsvg2</changelog>
  <changelog author="guoqinglan &lt;guoqinglan@kylinos.com.cn&gt; - 2.50.5-5" date="1684929600">- add sw_64 support</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.50.5-6" date="1693396800">- fix CVE-2023-38633</changelog>
</package>
<package pkgid="03ae277efdb497630737261dc33ad950f59ea3536e19a4f4fc7d19878733594a" name="libsass" arch="src">
  <version epoch="0" ver="3.6.4" rel="2.oe2203sp1"/>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 3.6.4-2" date="1703592000">- Fix CVE-2022-26592 CVE-2022-43358 CVE-2022-43357</changelog>
</package>
<package pkgid="2ee511ceccf3f751a702e3403bbdf2494bc8a59b64d39b4fe90040b12946f7f1" name="libselinux" arch="src">
  <version epoch="0" ver="3.3" rel="5.oe2203sp1"/>
  <changelog author="lujie &lt;lujie42@huawei.com&gt; - 3.3-1" date="1638964800">- update libselinux-3.1 to libselinux-3.3</changelog>
  <changelog author="lujie &lt;lujie54@huawei.com&gt; - 3.3-2" date="1665316800">- backport upstream patches</changelog>
  <changelog author="zhangguangzhi &lt;zhangguangzhi3@huawei.com&gt; - 3.3-3" date="1686657600">- backport upstream patches</changelog>
  <changelog author="zhangguangzhi &lt;zhangguangzhi3@huawei.com&gt; - 3.3-4" date="1694433600">- backport upstream patch</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 3.3-5" date="1701864000">- backport upstream patches</changelog>
</package>
<package pkgid="e7efbc2feb36e7fcd34a5196f5dfd2b81a1c963dd0f8a5ba4551c4eee760453e" name="libsolv" arch="src">
  <version epoch="0" ver="0.7.22" rel="2.oe2203sp1"/>
  <changelog author="wangkerong&lt;wangkerong@huawei.com&gt; - 0.7.20-1" date="1640433600">- update to 0.7.20</changelog>
  <changelog author="zhangjun&lt;zhangjun@kylinos.cn&gt; - 0.7.20-2" date="1665489600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Fix memory leak when using testsolv to execute cases 
       Fix segfault on conflict resolution when using bindings</changelog>
  <changelog author="hanhuihui&lt;hanhuihui5@huawei.com&gt; - 0.7.20-3" date="1666353600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:ensure-duplinvolvedmap_all-is-reset.patch</changelog>
  <changelog author="hanhuihui&lt;hanhuihui5@huawei.com&gt; - 0.7.22-1" date="1667908800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:update libsolv to 0.7.22-1</changelog>
  <changelog author="hanhuihui&lt;hanhuihui5@huawei.com&gt; - 0.7.22-2" date="1692446400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix requirement error</changelog>
</package>
<package pkgid="7a763485639af5d5c4871d9845c41e98b15f73e453e7b7cbdb8f7820220d4249" name="libsoup" arch="src">
  <version epoch="0" ver="2.74.2" rel="3.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 2.74.2-2" date="1666785600">- Rebuild for next release</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.74.2-3" date="1708344000">- rebuild for glib2 without sysprof</changelog>
</package>
<package pkgid="be852cf71d2428d441969ad6bc39815cf974fb8b7486f331f1ae50c51e691e20" name="libsoup" arch="src">
  <version epoch="0" ver="2.74.2" rel="4.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 2.74.2-2" date="1666785600">- Rebuild for next release</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.74.2-3" date="1708344000">- rebuild for glib2 without sysprof</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.74.2-4" date="1713441600">- Rebuild for next release</changelog>
</package>
<package pkgid="3656af7e3124f1001a3585d4501897bc3e45fb589a086f3beb31d1f5db32a1d5" name="libssh" arch="src">
  <version epoch="0" ver="0.9.6" rel="7.oe2203sp1"/>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 0.9.6-1" date="1638532800">- Type:requirement
- Id:NA
- SUG:NA
- DESC:update libssh to 0.9.6</changelog>
  <changelog author="xihaochen &lt;xihaochen@h-partners.com&gt; - 0.9.6-2" date="1647432000">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:remove obsolete lib</changelog>
  <changelog author="zengweifeng &lt;zwfeng@huawei.com&gt; - 0.9.6-3" date="1662120000">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:add errno while reset with strtoul call
       fix error returned in ssh_userauth_try_publicke
       client do not close the socket if it was set via opt
       fix openForward to not set sourcehost to NULL
       fix the length calculation of packet in sftp_write</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 0.9.6-4" date="1665662400">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:options: Parse hostname by last '@'
       torture_options: Add test for '@' in login name
       session: Initialize pointers
       tests: Ensure the mode of the created file is what we set</changelog>
  <changelog author="seuzw &lt;930zhaowei@163.com&gt; - 0.9.6-5" date="1666094400">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:backport some upstream patches:
       Avoid false positive report from Coveritt CID 1470006
       kdf: Avoid endianess issues
       misc: Fix format truncation in ssh_path_expand_escape()
       misc: Fix expanding port numbers
       misc: rename gettimeofday symbol
       session: Initialize the port with the standard port (22)
       session-&gt;socket_callbacks.data will be set to ssh_packet_socket_callback
       socket: Add error message if execv fails
       tests: Add test for expanding port numbers</changelog>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 0.9.6-6" date="1680004800">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:config: Escape brackets in ProxyCommand build
       packet: do not enqueue outgoing packets</changelog>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 0.9.6-7" date="1684497600">- Type:CVE
- Id:CVE-2023-1667,CVE-2023-2283
- SUG:NA
- DESC:fix CVE-2023-1667 and CVE-2023-2283</changelog>
</package>
<package pkgid="ec5d9c1db69270ed8009cb0fba494e398eb0314a4609bccb6421e43d303b5bec" name="libssh" arch="src">
  <version epoch="0" ver="0.9.6" rel="8.oe2203sp1"/>
  <changelog author="xihaochen &lt;xihaochen@h-partners.com&gt; - 0.9.6-2" date="1647432000">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:remove obsolete lib</changelog>
  <changelog author="zengweifeng &lt;zwfeng@huawei.com&gt; - 0.9.6-3" date="1662120000">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:add errno while reset with strtoul call
       fix error returned in ssh_userauth_try_publicke
       client do not close the socket if it was set via opt
       fix openForward to not set sourcehost to NULL
       fix the length calculation of packet in sftp_write</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 0.9.6-4" date="1665662400">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:options: Parse hostname by last '@'
       torture_options: Add test for '@' in login name
       session: Initialize pointers
       tests: Ensure the mode of the created file is what we set</changelog>
  <changelog author="seuzw &lt;930zhaowei@163.com&gt; - 0.9.6-5" date="1666094400">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:backport some upstream patches:
       Avoid false positive report from Coveritt CID 1470006
       kdf: Avoid endianess issues
       misc: Fix format truncation in ssh_path_expand_escape()
       misc: Fix expanding port numbers
       misc: rename gettimeofday symbol
       session: Initialize the port with the standard port (22)
       session-&gt;socket_callbacks.data will be set to ssh_packet_socket_callback
       socket: Add error message if execv fails
       tests: Add test for expanding port numbers</changelog>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 0.9.6-6" date="1680004800">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:config: Escape brackets in ProxyCommand build
       packet: do not enqueue outgoing packets</changelog>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 0.9.6-7" date="1684497600">- Type:CVE
- Id:CVE-2023-1667,CVE-2023-2283
- SUG:NA
- DESC:fix CVE-2023-1667 and CVE-2023-2283</changelog>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 0.9.6-8" date="1703764800">- Type:CVE
- Id:CVE-2023-6004,CVE-2023-6918,CVE-2023-48795
- SUG:NA
- DESC:fix CVE-2023-6004, CVE-2023-6918 and CVE-2023-48795</changelog>
</package>
<package pkgid="e80ae22940e26d70a6d14e90f7e9ae487ea6b69478939758c7604e9aa850caca" name="libssh2" arch="src">
  <version epoch="0" ver="1.10.0" rel="6.oe2203sp1"/>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 1.10.0-3" date="1666094400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:sftp: Prevent files from being skipped</changelog>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 1.10.0-4" date="1676548800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Support rsa-sha2 agent flags</changelog>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 1.10.0-5" date="1680004800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:backport some upstream patches</changelog>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 1.10.0-6" date="1712145600">- Type:CVE
- ID:CVE-2023-48795
- SUG:NA
- DESC:fix CVE-2023-48795</changelog>
</package>
<package pkgid="86ede1cfd9fd74687bbc4df705714ba6a3b9e2cfb4a1567d1fd4ad35e4492711" name="libteam" arch="src">
  <version epoch="0" ver="1.31" rel="3.oe2203sp1"/>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.31-2" date="1662638400">- fix error options in doc</changelog>
  <changelog author="zhangruifang &lt;zhangruifang1@h-partners.com&gt; - 1.31-3" date="1695297600">- fix an issue about teamd is using 100% cpu usage (of 1 core)</changelog>
</package>
<package pkgid="02c4ac398dedee1dbae9707d57c20965bcf8595fa53550fd0526f8b7dee1100b" name="libtiff" arch="src">
  <version epoch="0" ver="4.3.0" rel="24.oe2203sp1"/>
  <changelog author="wuchaochao &lt;cyanrose@yeah.net&gt; - 4.3.0-15" date="1655208000">- fix CVE-2022-1622 and CVE-2022-1623</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-16" date="1657022400">- fix CVE-2022-1354</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-17" date="1661256000">- fix CVE-2022-2867,CVE-2022-2868,CVE-2022-2869</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-18" date="1663070400">- fix CVE-2022-2953,CVE-2022-2519,CVE-2022-2520,CVE-2022-2521</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-19" date="1666008000">- fix CVE-2022-2056,CVE-2022-2057,CVE-2022-2058</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-20" date="1666785600">- fix CVE-2022-3570,CVE-2022-3597,CVE-2022-3598,CVE-2022-3599,CVE-2022-3626,CVE-2022-3627</changelog>
  <changelog author="qisen &lt;qisen@huawei.com&gt; - 4.3.0-21" date="1668686400">- Type:cve
- ID:CVE-2022-3970
- SUG:NA
- DESC:fix CVE-2022-3970</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-22" date="1674993600">- Type:cve
- ID:CVE-2022-48281
- SUG:NA
- DESC:fix CVE-2022-48281</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-23" date="1676548800">- fix CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799,
- fix CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-24" date="1676894400">- modified backport-CVE-2022-48281.patch</changelog>
</package>
<package pkgid="0211b3b2dd11ae9b9fa5f777e223bb908f9794d318826fd540d2e34c0f64a888" name="libtiff" arch="src">
  <version epoch="0" ver="4.3.0" rel="25.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-16" date="1657022400">- fix CVE-2022-1354</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-17" date="1661256000">- fix CVE-2022-2867,CVE-2022-2868,CVE-2022-2869</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-18" date="1663070400">- fix CVE-2022-2953,CVE-2022-2519,CVE-2022-2520,CVE-2022-2521</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-19" date="1666008000">- fix CVE-2022-2056,CVE-2022-2057,CVE-2022-2058</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-20" date="1666785600">- fix CVE-2022-3570,CVE-2022-3597,CVE-2022-3598,CVE-2022-3599,CVE-2022-3626,CVE-2022-3627</changelog>
  <changelog author="qisen &lt;qisen@huawei.com&gt; - 4.3.0-21" date="1668686400">- Type:cve
- ID:CVE-2022-3970
- SUG:NA
- DESC:fix CVE-2022-3970</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-22" date="1674993600">- Type:cve
- ID:CVE-2022-48281
- SUG:NA
- DESC:fix CVE-2022-48281</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-23" date="1676548800">- fix CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799,
- fix CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-24" date="1676894400">- modified backport-CVE-2022-48281.patch</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-25" date="1684929600">- fix CVE-2023-2731</changelog>
</package>
<package pkgid="636925b9d5b2c20f015fcf33c69f7d52471a20e39e5577aef162c97547e74b7c" name="libtiff" arch="src">
  <version epoch="0" ver="4.3.0" rel="27.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-18" date="1663070400">- fix CVE-2022-2953,CVE-2022-2519,CVE-2022-2520,CVE-2022-2521</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-19" date="1666008000">- fix CVE-2022-2056,CVE-2022-2057,CVE-2022-2058</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-20" date="1666785600">- fix CVE-2022-3570,CVE-2022-3597,CVE-2022-3598,CVE-2022-3599,CVE-2022-3626,CVE-2022-3627</changelog>
  <changelog author="qisen &lt;qisen@huawei.com&gt; - 4.3.0-21" date="1668686400">- Type:cve
- ID:CVE-2022-3970
- SUG:NA
- DESC:fix CVE-2022-3970</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-22" date="1674993600">- Type:cve
- ID:CVE-2022-48281
- SUG:NA
- DESC:fix CVE-2022-48281</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-23" date="1676548800">- fix CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799,
- fix CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-24" date="1676894400">- modified backport-CVE-2022-48281.patch</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-25" date="1684929600">- fix CVE-2023-2731</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-26" date="1686830400">- fix CVE-2023-26965</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-27" date="1687694400">- fix CVE-2023-3316</changelog>
</package>
<package pkgid="c8d48740cf690f90bf78fea91f6572635aee60e59100250aa0557cab47deda3e" name="libtiff" arch="src">
  <version epoch="0" ver="4.3.0" rel="28.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-19" date="1666008000">- fix CVE-2022-2056,CVE-2022-2057,CVE-2022-2058</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-20" date="1666785600">- fix CVE-2022-3570,CVE-2022-3597,CVE-2022-3598,CVE-2022-3599,CVE-2022-3626,CVE-2022-3627</changelog>
  <changelog author="qisen &lt;qisen@huawei.com&gt; - 4.3.0-21" date="1668686400">- Type:cve
- ID:CVE-2022-3970
- SUG:NA
- DESC:fix CVE-2022-3970</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-22" date="1674993600">- Type:cve
- ID:CVE-2022-48281
- SUG:NA
- DESC:fix CVE-2022-48281</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-23" date="1676548800">- fix CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799,
- fix CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-24" date="1676894400">- modified backport-CVE-2022-48281.patch</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-25" date="1684929600">- fix CVE-2023-2731</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-26" date="1686830400">- fix CVE-2023-26965</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-27" date="1687694400">- fix CVE-2023-3316</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-28" date="1688472000">- fix CVE-2023-25433 CVE-2023-26966 CVE-2023-2908</changelog>
</package>
<package pkgid="f4fcfdd8b26ffe56b387b1939db567949faf7212effe892e0acc9228b98cf0b0" name="libtiff" arch="src">
  <version epoch="0" ver="4.3.0" rel="29.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-20" date="1666785600">- fix CVE-2022-3570,CVE-2022-3597,CVE-2022-3598,CVE-2022-3599,CVE-2022-3626,CVE-2022-3627</changelog>
  <changelog author="qisen &lt;qisen@huawei.com&gt; - 4.3.0-21" date="1668686400">- Type:cve
- ID:CVE-2022-3970
- SUG:NA
- DESC:fix CVE-2022-3970</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-22" date="1674993600">- Type:cve
- ID:CVE-2022-48281
- SUG:NA
- DESC:fix CVE-2022-48281</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-23" date="1676548800">- fix CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799,
- fix CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-24" date="1676894400">- modified backport-CVE-2022-48281.patch</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-25" date="1684929600">- fix CVE-2023-2731</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-26" date="1686830400">- fix CVE-2023-26965</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-27" date="1687694400">- fix CVE-2023-3316</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-28" date="1688472000">- fix CVE-2023-25433 CVE-2023-26966 CVE-2023-2908</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-29" date="1689249600">- fix CVE-2023-3576</changelog>
</package>
<package pkgid="977539a62da1b598d5754ef1d8571cb1f22730ab8aeab3ab92bb7b2e74731b54" name="libtiff" arch="src">
  <version epoch="0" ver="4.3.0" rel="30.oe2203sp1"/>
  <changelog author="qisen &lt;qisen@huawei.com&gt; - 4.3.0-21" date="1668686400">- Type:cve
- ID:CVE-2022-3970
- SUG:NA
- DESC:fix CVE-2022-3970</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-22" date="1674993600">- Type:cve
- ID:CVE-2022-48281
- SUG:NA
- DESC:fix CVE-2022-48281</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-23" date="1676548800">- fix CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799,
- fix CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-24" date="1676894400">- modified backport-CVE-2022-48281.patch</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-25" date="1684929600">- fix CVE-2023-2731</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-26" date="1686830400">- fix CVE-2023-26965</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-27" date="1687694400">- fix CVE-2023-3316</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-28" date="1688472000">- fix CVE-2023-25433 CVE-2023-26966 CVE-2023-2908</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-29" date="1689249600">- fix CVE-2023-3576</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-30" date="1690545600">- fix CVE-2023-38288 CVE-2023-38289</changelog>
</package>
<package pkgid="07ccc4293c1ab8b49f0e828aa7e9bc3fd7a158a3dc901dac6d5a552efbbceeb2" name="libtiff" arch="src">
  <version epoch="0" ver="4.3.0" rel="31.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-22" date="1674993600">- Type:cve
- ID:CVE-2022-48281
- SUG:NA
- DESC:fix CVE-2022-48281</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-23" date="1676548800">- fix CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799,
- fix CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-24" date="1676894400">- modified backport-CVE-2022-48281.patch</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-25" date="1684929600">- fix CVE-2023-2731</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-26" date="1686830400">- fix CVE-2023-26965</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-27" date="1687694400">- fix CVE-2023-3316</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-28" date="1688472000">- fix CVE-2023-25433 CVE-2023-26966 CVE-2023-2908</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-29" date="1689249600">- fix CVE-2023-3576</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-30" date="1690545600">- fix CVE-2023-38288 CVE-2023-38289</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 4.3.0-31" date="1692187200">- fix CVE-2023-3618</changelog>
</package>
<package pkgid="836df6feb1baf6e691502c376f295316266cce50b14ca1337a2de45185f85f18" name="libtiff" arch="src">
  <version epoch="0" ver="4.3.0" rel="32.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-23" date="1676548800">- fix CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799,
- fix CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 4.3.0-24" date="1676894400">- modified backport-CVE-2022-48281.patch</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-25" date="1684929600">- fix CVE-2023-2731</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-26" date="1686830400">- fix CVE-2023-26965</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-27" date="1687694400">- fix CVE-2023-3316</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-28" date="1688472000">- fix CVE-2023-25433 CVE-2023-26966 CVE-2023-2908</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-29" date="1689249600">- fix CVE-2023-3576</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-30" date="1690545600">- fix CVE-2023-38288 CVE-2023-38289</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 4.3.0-31" date="1692187200">- fix CVE-2023-3618</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-32" date="1693569600">- fix CVE-2022-40090</changelog>
</package>
<package pkgid="6d0f9f73d3ebfb6752a15fd4506bdec5856276ddf731c4f26c6cb33df0206695" name="libtiff" arch="src">
  <version epoch="0" ver="4.3.0" rel="34.oe2203sp1"/>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-25" date="1684929600">- fix CVE-2023-2731</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-26" date="1686830400">- fix CVE-2023-26965</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-27" date="1687694400">- fix CVE-2023-3316</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-28" date="1688472000">- fix CVE-2023-25433 CVE-2023-26966 CVE-2023-2908</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-29" date="1689249600">- fix CVE-2023-3576</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-30" date="1690545600">- fix CVE-2023-38288 CVE-2023-38289</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 4.3.0-31" date="1692187200">- fix CVE-2023-3618</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-32" date="1693569600">- fix CVE-2022-40090</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-33" date="1694088000">- fix CVE-2022-34526</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 4.3.0-34" date="1700568000">- fix CVE-2023-6228</changelog>
</package>
<package pkgid="7b6c86bb33d54f1b0326144501ddb0cbe48048d10f0dddaff3cace656b2247ed" name="libtiff" arch="src">
  <version epoch="0" ver="4.3.0" rel="36.oe2203sp1"/>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-27" date="1687694400">- fix CVE-2023-3316</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-28" date="1688472000">- fix CVE-2023-25433 CVE-2023-26966 CVE-2023-2908</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-29" date="1689249600">- fix CVE-2023-3576</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-30" date="1690545600">- fix CVE-2023-38288 CVE-2023-38289</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 4.3.0-31" date="1692187200">- fix CVE-2023-3618</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-32" date="1693569600">- fix CVE-2022-40090</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-33" date="1694088000">- fix CVE-2022-34526</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 4.3.0-34" date="1700568000">- fix CVE-2023-6228</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 4.3.0-35" date="1700913600">- fix CVE-2023-6277</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 4.3.0-36" date="1701259200">- backport patch for fix CVE-2023-6277 issue</changelog>
</package>
<package pkgid="c6e6e032ac7bd7035d2dad8648f8ca1af3ccbba68ea9ebabb0ec983cbc37d145" name="libtiff" arch="src">
  <version epoch="0" ver="4.3.0" rel="37.oe2203sp1"/>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-28" date="1688472000">- fix CVE-2023-25433 CVE-2023-26966 CVE-2023-2908</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-29" date="1689249600">- fix CVE-2023-3576</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-30" date="1690545600">- fix CVE-2023-38288 CVE-2023-38289</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 4.3.0-31" date="1692187200">- fix CVE-2023-3618</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-32" date="1693569600">- fix CVE-2022-40090</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-33" date="1694088000">- fix CVE-2022-34526</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 4.3.0-34" date="1700568000">- fix CVE-2023-6228</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 4.3.0-35" date="1700913600">- fix CVE-2023-6277</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 4.3.0-36" date="1701259200">- backport patch for fix CVE-2023-6277 issue</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 4.3.0-37" date="1716206400">- Type:CVE
- ID:CVE-2023-1916,CVE-2023-3164
- SUG:NA
- DESC:fix CVE-2023-1916 CVE-2023-3164</changelog>
</package>
<package pkgid="d3fd11f851236e426acc3a8a046df58968e1e296aec6fbcdba77cfcc87e91103" name="libtiff" arch="src">
  <version epoch="0" ver="4.3.0" rel="38.oe2203sp1"/>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-29" date="1689249600">- fix CVE-2023-3576</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-30" date="1690545600">- fix CVE-2023-38288 CVE-2023-38289</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 4.3.0-31" date="1692187200">- fix CVE-2023-3618</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-32" date="1693569600">- fix CVE-2022-40090</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-33" date="1694088000">- fix CVE-2022-34526</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 4.3.0-34" date="1700568000">- fix CVE-2023-6228</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 4.3.0-35" date="1700913600">- fix CVE-2023-6277</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 4.3.0-36" date="1701259200">- backport patch for fix CVE-2023-6277 issue</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 4.3.0-37" date="1716206400">- Type:CVE
- ID:CVE-2023-1916,CVE-2023-3164
- SUG:NA
- DESC:fix CVE-2023-1916 CVE-2023-3164</changelog>
  <changelog author="baiguo &lt;baiguo@kylinos.cn&gt; - 4.3.0-38" date="1723550400">- Type:CVE
- ID:CVE-2024-7006
- SUG:NA
- DESC:fix CVE-2024-7006</changelog>
</package>
<package pkgid="45f7c00e1e30cf04651ecf0b35923968ddc9d4e1915cb9b791a9dd9b6d45c68d" name="libtirpc" arch="src">
  <version epoch="0" ver="1.3.2" rel="3.oe2203sp1"/>
  <changelog author="yanglu &lt;yanglu72@huawei.com&gt; - 1.3.2-1" date="1638619200">- Type:requirements
- ID:NA
- SUG:NA
- DESC: update libtirpc to 1.3.2</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.3.2-2" date="1658491200">- Type:CVE
- ID:CVE-2021-46828
- SUG:NA
- DESC:fix CVE-2021-46828</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.3.2-3" date="1677585600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: delete *.a file</changelog>
</package>
<package pkgid="8d1257280a834eddf5b5e4cbf6e4c08432e53827aa0d35497eea9d14841f0368" name="libtirpc" arch="src">
  <version epoch="0" ver="1.3.2" rel="4.oe2203sp1"/>
  <changelog author="yanglu &lt;yanglu72@huawei.com&gt; - 1.3.2-1" date="1638619200">- Type:requirements
- ID:NA
- SUG:NA
- DESC: update libtirpc to 1.3.2</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.3.2-2" date="1658491200">- Type:CVE
- ID:CVE-2021-46828
- SUG:NA
- DESC:fix CVE-2021-46828</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.3.2-3" date="1677585600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: delete *.a file</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.3.2-4" date="1687003200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: remove useless dependency man-db</changelog>
</package>
<package pkgid="f730edc233b7a025e470d127b9945fe203210121cc98c002d827181f8430dba2" name="libtirpc" arch="src">
  <version epoch="0" ver="1.3.2" rel="5.oe2203sp1"/>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.3.2-2" date="1658491200">- Type:CVE
- ID:CVE-2021-46828
- SUG:NA
- DESC:fix CVE-2021-46828</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.3.2-3" date="1677585600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: delete *.a file</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.3.2-4" date="1687003200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: remove useless dependency man-db</changelog>
  <changelog author="Wenhua Huang &lt;huangwenhua@kylinos.cn&gt; - 1.3.2-5" date="1720612800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix rpc_gss_seccreate passed in cred</changelog>
</package>
<package pkgid="a5a913f4655d61c73f42b35ceab25ac0a411cc9aa9439a4430bb6f8883fbd7ce" name="libtommath" arch="src">
  <version epoch="0" ver="1.2.0" rel="4.oe2203sp1"/>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 1.2.0-2" date="1666872000">- Rebuild for next release</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 1.2.0-3" date="1680091200">- enable check test suite</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 1.2.0-4" date="1693828800">- Fix CVE-2023-36328</changelog>
</package>
<package pkgid="342b5af1167cc3231ba34c100cac51517053090b2496da4b3cfd70f4d1571068" name="libtpms" arch="src">
  <version epoch="0" ver="0.7.3" rel="8.oe2203sp1"/>
  <changelog author="jiangfangjie &lt;jiangfangjie@huawei.com&gt; - 0.7.3-5" date="1636545600">-TYPE: CVE
-ID:NA
-ID:NA
-DESC: fix CVE-2021-3746</changelog>
  <changelog author="imxcc &lt;xingchaochao@huawei.com&gt; - 0.7.3-6" date="1644840000">- fix bare word "debug" in spec</changelog>
  <changelog author="yezengruan &lt;yezengruan@huawei.com&gt; - 0.7.3-7" date="1652875200">- tpm2: Reset TPM2B buffer sizes after test fails for valid buffer size
- tpm2: Add maxSize parameter to TPM2B_Marshal for sanity checks
- tpm2: Restore original value if unmarsalled value was illegal
- fix CVE-2021-3623</changelog>
  <changelog author="jiangfangjie &lt;jiangfangjie@huawei.com&gt; - 0.7.3-8" date="1684324800">- fix CVE-2023--1018 and CVE-2023-1017</changelog>
</package>
<package pkgid="43e6bcdbb29068906edff6214945454fae199f20696482bce58be86e030ab2c9" name="libtraceevent" arch="src">
  <version epoch="0" ver="1.2.1" rel="3.oe2203sp1"/>
  <changelog author="houyingchao &lt;houyingchao@huawei.com&gt; - 1.2.1-1" date="1642161600">- Init package</changelog>
  <changelog author="xu_ping &lt;xuping33@h-partners.com&gt; - 1.2.1-2" date="1670241600">- Add -fstack-protector-strong compile options</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1.2.1-3" date="1674129600">- Add conflict with perf</changelog>
</package>
<package pkgid="a2d2dd2439b57091191faf9e725db6eabb191a74b220913431024b864a7d5f85" name="libuv" arch="src">
  <version epoch="1" ver="1.42.0" rel="8.oe2203sp1"/>
  <changelog author="renhongxun &lt;renhongxun@h-partners.com&gt; - 1.42.0-2" date="1655726400">- enable check</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 1:1.42.0-3" date="1670500800">- skip some test</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 1:1.42.0-4" date="1671105600">- add make to buildrequires</changelog>
  <changelog author="chenziyang &lt;chenziyang4@huawei.com&gt; - 1:1.42.0-5" date="1671278400">- add sw64 architecture</changelog>
  <changelog author="caofei &lt;caofei@xfusion.com&gt; -  1:1.42.0-6" date="1673092800">- fix typo in test-tty-escape-sequence-processing.c</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 1:1.42.0-7" date="1682337600">- fix Obsoletes in spec and remove ldconfig_scriptlets from check</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 1:1.42.0-8" date="1708257600">- fix CVE-2024-24806</changelog>
</package>
<package pkgid="e793898bf0fe32917d675cbba913a55e9c5de6884214ef58975a2b433ba73824" name="libva" arch="src">
  <version epoch="0" ver="2.20.0" rel="1.oe2203sp1"/>
  <changelog author="mengwenhua&lt;mengwenhua@xfusion.com&gt; - 2.13.0-2" date="1673265600">- Add the missing trace log for the VA encoder API.</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.20.0-1" date="1717502400">- Upgrade to 2.20.0
- Fix CVE-2023-39929
- Fix minor issue about printf data type and value range
- av1: Revise offsets comments for av1 encode
- jpeg: add support for crop and partial decode
- Drop no longer applicable vaGetDriverNames check</changelog>
</package>
<package pkgid="fafd97b7e872a1a92b90eb0eb4a8dd100706aedab113c1bb6d94bbb2bea6cdf9" name="libvirt" arch="src">
  <version epoch="0" ver="6.2.0" rel="63.oe2203sp1"/>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 6.2.0-54" date="1680609600">- bugfix: Fix build error if compiler switch to clang.</changelog>
  <changelog author="tianyuan &lt;tianyuan01@chinasoftinc.com&gt; - 6.2.0-55" date="1682424000">- bugfix: Fix potential crash during driver cleanup</changelog>
  <changelog author="XuFei &lt;xufei30@huawei.com&gt; - 6.2.0-56" date="1684670400">- nodedev: ignore EINVAL from libudev in udevEventHandleThread
- qemu: tpm: Pass --logfile to swtpm_setup for incoming migration</changelog>
  <changelog author="zhangxinhao &lt;zhangxinhao1@huawei.com&gt; - 6.2.0-57" date="1684756800">- cpu_topo: support for cpu_topo "clusters” in conf
- cpu_topo: support for specifying "clusters" in qemu comand
- cpu_topo: support for reporting cluster_id in NUMA topology
- cpu_topo: fix detection of vCPU pids when multiple clusters are present</changelog>
  <changelog author="Jiabo Feng &lt;fengjiabo1@huawei.com&gt; - 6.2.0-58" date="1691582400">- virnetsshsession: Adapt to change libssh2 API
- selinux: Reflect context_str() type change
- Revert "selinux: adapt to libselinux"
- selinux: adapt to libselinux
- fix error in printf format string</changelog>
  <changelog author="lixianglai &lt;lixianglai@loongson.cn&gt; - 6.2.0-59" date="1693051200">- Synchronize upstream patches "Use correct tpm device for all non-x86"</changelog>
  <changelog author="lixianglai &lt;lixianglai@loongson.cn&gt; - 6.2.0-60" date="1694520000">- Fixed loongarch qxl device not displaying during startup phase</changelog>
  <changelog author="Jiabo Feng &lt;fengjiabo1@huawei.com&gt; - 6.2.0-61" date="1701259200">- lxc: fix lxcContainerMountAllFS() DEREF_BEFORE_CHECK
- qemu: Return perf status that affect next boot  for shutoff domains While we set up perf events for a shutoff domain and check the settings, All of perf events are reported as 'disabled', unless we add --config, This is redundant for a shutoff domain.
- tests: upstream Fixing compiler warning in cputest
- qemu_migration_cookie: Rename ret in qemuDomainExtractTLSSubject
- virrandom: Fix printf format string in virRandomGenerateWWN()
- fix the issue of errors when saving after 'virsh edit'
- Use (un)signed printf specifiers correctly
- admin: fix leak of typed parameters on error
- esx: call freeaddrinfo earlier in esxUtil_ResolveHostname Call freeaddrinfo() as soon as @result is not needed anymore, i.e. right after getnameinfo(); this avoids calling freeaddrinfo() in two branches.
- qemu: Fix incorrect command name in error messages</changelog>
  <changelog author="jiangdongxu &lt;jiangdongxu1@huawei.com&gt; - 6.2.0-62" date="1710331200">- vdpa: Release pci slot address when unplugging vdpa device
- vdpa: return pcieFlags when calculate vdpa passthrough devices.
- vdpa: support vdpa device migrate
- vdpa: support vdpa device hot plug/unplug
- vdpa: Introduce the new device type vdpa to hostdev
- node_device: fix leak of DIR*
- Include vdpa devices in node device list</changelog>
  <changelog author="caozhongwang &lt;caozhongwang1@huawei.com&gt;" date="1712750400">- interface: fix udev_device_get_sysattr_value return value check (CVE-2024-2496)
- remote: check for negative array lengths before allocation (CVE-2024-2494)
- vish:Fix off-by-one error in udevListInterfacesByStatus (CVE-2024-1441)</changelog>
</package>
<package pkgid="2558151d1d4f752a0a1e28c3942538999c1a5d5696832404b73dc49c1d8025ac" name="libvirt" arch="src">
  <version epoch="0" ver="6.2.0" rel="64.oe2203sp1"/>
  <changelog author="tianyuan &lt;tianyuan01@chinasoftinc.com&gt; - 6.2.0-55" date="1682424000">- bugfix: Fix potential crash during driver cleanup</changelog>
  <changelog author="XuFei &lt;xufei30@huawei.com&gt; - 6.2.0-56" date="1684670400">- nodedev: ignore EINVAL from libudev in udevEventHandleThread
- qemu: tpm: Pass --logfile to swtpm_setup for incoming migration</changelog>
  <changelog author="zhangxinhao &lt;zhangxinhao1@huawei.com&gt; - 6.2.0-57" date="1684756800">- cpu_topo: support for cpu_topo "clusters” in conf
- cpu_topo: support for specifying "clusters" in qemu comand
- cpu_topo: support for reporting cluster_id in NUMA topology
- cpu_topo: fix detection of vCPU pids when multiple clusters are present</changelog>
  <changelog author="Jiabo Feng &lt;fengjiabo1@huawei.com&gt; - 6.2.0-58" date="1691582400">- virnetsshsession: Adapt to change libssh2 API
- selinux: Reflect context_str() type change
- Revert "selinux: adapt to libselinux"
- selinux: adapt to libselinux
- fix error in printf format string</changelog>
  <changelog author="lixianglai &lt;lixianglai@loongson.cn&gt; - 6.2.0-59" date="1693051200">- Synchronize upstream patches "Use correct tpm device for all non-x86"</changelog>
  <changelog author="lixianglai &lt;lixianglai@loongson.cn&gt; - 6.2.0-60" date="1694520000">- Fixed loongarch qxl device not displaying during startup phase</changelog>
  <changelog author="Jiabo Feng &lt;fengjiabo1@huawei.com&gt; - 6.2.0-61" date="1701259200">- lxc: fix lxcContainerMountAllFS() DEREF_BEFORE_CHECK
- qemu: Return perf status that affect next boot  for shutoff domains While we set up perf events for a shutoff domain and check the settings, All of perf events are reported as 'disabled', unless we add --config, This is redundant for a shutoff domain.
- tests: upstream Fixing compiler warning in cputest
- qemu_migration_cookie: Rename ret in qemuDomainExtractTLSSubject
- virrandom: Fix printf format string in virRandomGenerateWWN()
- fix the issue of errors when saving after 'virsh edit'
- Use (un)signed printf specifiers correctly
- admin: fix leak of typed parameters on error
- esx: call freeaddrinfo earlier in esxUtil_ResolveHostname Call freeaddrinfo() as soon as @result is not needed anymore, i.e. right after getnameinfo(); this avoids calling freeaddrinfo() in two branches.
- qemu: Fix incorrect command name in error messages</changelog>
  <changelog author="jiangdongxu &lt;jiangdongxu1@huawei.com&gt; - 6.2.0-62" date="1710331200">- vdpa: Release pci slot address when unplugging vdpa device
- vdpa: return pcieFlags when calculate vdpa passthrough devices.
- vdpa: support vdpa device migrate
- vdpa: support vdpa device hot plug/unplug
- vdpa: Introduce the new device type vdpa to hostdev
- node_device: fix leak of DIR*
- Include vdpa devices in node device list</changelog>
  <changelog author="caozhongwang &lt;caozhongwang1@huawei.com&gt;" date="1712750400">- interface: fix udev_device_get_sysattr_value return value check (CVE-2024-2496)
- remote: check for negative array lengths before allocation (CVE-2024-2494)
- vish:Fix off-by-one error in udevListInterfacesByStatus (CVE-2024-1441)</changelog>
  <changelog author="jiangjiacheng &lt;jiangjiacheng@huawei.com&gt; - 6.2.0-64" date="1716552000">- util: keep track of full GSource object not source ID number
- rpc: mark source returned by virEventGLibAddSocketWatch as unused
- rpc: ensure temporary GSource is removed from client event loop (CVE-2024-4418)</changelog>
</package>
<package pkgid="a723dbb2b2bc90c428a3a7b047c2bc40379f54c1c69a4df2ecb0294649afd4af" name="libvirt" arch="src">
  <version epoch="0" ver="6.2.0" rel="65.oe2203sp1"/>
  <changelog author="XuFei &lt;xufei30@huawei.com&gt; - 6.2.0-56" date="1684670400">- nodedev: ignore EINVAL from libudev in udevEventHandleThread
- qemu: tpm: Pass --logfile to swtpm_setup for incoming migration</changelog>
  <changelog author="zhangxinhao &lt;zhangxinhao1@huawei.com&gt; - 6.2.0-57" date="1684756800">- cpu_topo: support for cpu_topo "clusters” in conf
- cpu_topo: support for specifying "clusters" in qemu comand
- cpu_topo: support for reporting cluster_id in NUMA topology
- cpu_topo: fix detection of vCPU pids when multiple clusters are present</changelog>
  <changelog author="Jiabo Feng &lt;fengjiabo1@huawei.com&gt; - 6.2.0-58" date="1691582400">- virnetsshsession: Adapt to change libssh2 API
- selinux: Reflect context_str() type change
- Revert "selinux: adapt to libselinux"
- selinux: adapt to libselinux
- fix error in printf format string</changelog>
  <changelog author="lixianglai &lt;lixianglai@loongson.cn&gt; - 6.2.0-59" date="1693051200">- Synchronize upstream patches "Use correct tpm device for all non-x86"</changelog>
  <changelog author="lixianglai &lt;lixianglai@loongson.cn&gt; - 6.2.0-60" date="1694520000">- Fixed loongarch qxl device not displaying during startup phase</changelog>
  <changelog author="Jiabo Feng &lt;fengjiabo1@huawei.com&gt; - 6.2.0-61" date="1701259200">- lxc: fix lxcContainerMountAllFS() DEREF_BEFORE_CHECK
- qemu: Return perf status that affect next boot  for shutoff domains While we set up perf events for a shutoff domain and check the settings, All of perf events are reported as 'disabled', unless we add --config, This is redundant for a shutoff domain.
- tests: upstream Fixing compiler warning in cputest
- qemu_migration_cookie: Rename ret in qemuDomainExtractTLSSubject
- virrandom: Fix printf format string in virRandomGenerateWWN()
- fix the issue of errors when saving after 'virsh edit'
- Use (un)signed printf specifiers correctly
- admin: fix leak of typed parameters on error
- esx: call freeaddrinfo earlier in esxUtil_ResolveHostname Call freeaddrinfo() as soon as @result is not needed anymore, i.e. right after getnameinfo(); this avoids calling freeaddrinfo() in two branches.
- qemu: Fix incorrect command name in error messages</changelog>
  <changelog author="jiangdongxu &lt;jiangdongxu1@huawei.com&gt; - 6.2.0-62" date="1710331200">- vdpa: Release pci slot address when unplugging vdpa device
- vdpa: return pcieFlags when calculate vdpa passthrough devices.
- vdpa: support vdpa device migrate
- vdpa: support vdpa device hot plug/unplug
- vdpa: Introduce the new device type vdpa to hostdev
- node_device: fix leak of DIR*
- Include vdpa devices in node device list</changelog>
  <changelog author="caozhongwang &lt;caozhongwang1@huawei.com&gt;" date="1712750400">- interface: fix udev_device_get_sysattr_value return value check (CVE-2024-2496)
- remote: check for negative array lengths before allocation (CVE-2024-2494)
- vish:Fix off-by-one error in udevListInterfacesByStatus (CVE-2024-1441)</changelog>
  <changelog author="jiangjiacheng &lt;jiangjiacheng@huawei.com&gt; - 6.2.0-64" date="1716552000">- util: keep track of full GSource object not source ID number
- rpc: mark source returned by virEventGLibAddSocketWatch as unused
- rpc: ensure temporary GSource is removed from client event loop (CVE-2024-4418)</changelog>
  <changelog author="Jiabo Feng &lt;fengjiabo1@huawei.com&gt; - 6.2.0-65" date="1718280000">- remote: fix double free of migration params on error
- qemu: avoid deadlock in qemuDomainObjStopWorker We are dropping the only reference here so that the event loop thread is going to be exited synchronously. In order to avoid deadlocks we need to unlock the VM so that any handler being called can finish execution and thus even loop thread be finished too.
- virsh: add tmm main command word Add tmm command word into virsh tool to call get tmm memory info API. It makes virsh can use tmm main commmand to show tmm memory info on console. This command requires specific kernel and a kernel driver to make sure its regular function. If runnning environment missing the above reliance, this command will show error result on console.
- libvirt: add get tmm memory info API and libvirtd RPC Add the get tmm memory info API into libvirt-host. Also should add the RPC calls into libvirtd for API calling.
- libvirt: support the virtCCA feature Add cvm parameter into the type of LaunchSecurity which is a optional filed for libvirt xml. Its purpose is to pass the cvm parameter through to qemu. Also this patch support virsh edit to save cvm parameter into libvirt temporary xml.
- qemu_driver: Add calc_mode for dirtyrate statistics
- virsh: Add mode option to domdirtyrate-calc virsh api
- qemu: Generate command line for dirty-ring-size
- qemu: support dirty ring feature
- conf: Turn virDomainDef.kvm_features into a struct
- qemu_validate: Allow kvm hint-dedicated on non-passthrough VMs
- virDomainFeaturesKVMDefParse: Remove tautological "if"
- virDomainFeaturesKVMDefParse: Remove tautological "switch"
- virxml: Add virXMLPropUInt
- virxml: Add virXMLPropInt
- virxml: Add virXMLPropTristateSwitch
- virxml: Add virXMLPropTristateBool
- virDomainFeaturesKVMDefParse: Remove ctxt
- virDomainFeaturesDefParse: Factor out KVM parsing into separate function
- internal.h: Introduce and use VIR_IS_POW2()
- hotpatch: if hotpatch_path not in qemu.conf,the hotpatch doesn't antoload</changelog>
</package>
<package pkgid="1307a1e40d403c73861cc342d9d7168b93bb72ccd890ccc1af341b7365f192fc" name="libvpx" arch="src">
  <version epoch="0" ver="1.7.0" rel="10.oe2203sp1"/>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1.7.0-9" date="1692705600">- add loongarch64 and sw_64 support</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1.7.0-10" date="1696161600">- fix CVE-2023-5217 &amp; CVE-2023-44488</changelog>
</package>
<package pkgid="3987c44b4cf2d5739397cff3927b69d6b4741b0e0fc44ff2d8c75cb9d9095915" name="libvpx" arch="src">
  <version epoch="0" ver="1.7.0" rel="12.oe2203sp1"/>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1.7.0-9" date="1692705600">- add loongarch64 and sw_64 support</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1.7.0-10" date="1696161600">- fix CVE-2023-5217 &amp; CVE-2023-44488</changelog>
  <changelog author="hefq343&lt;fengqing.he@shingroup.cn&gt; - 1.7.0-11" date="1710158400">- add ppc64le support</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.7.0-12" date="1717761600">- Fix CVE-2024-5197</changelog>
</package>
<package pkgid="3ae82b47b94d449875c76ea4a547fe2828161d7b8be60f0dcd642426df88be41" name="libwd" arch="src">
  <version epoch="0" ver="2.3.37" rel="2.oe2203sp1"/>
  <changelog author="Yang Shen &lt;shenyang39@huawei.com&gt; 2.3.20-1" date="1637582400">- libwd: update uadk from 2.3.11 to 2.3.20</changelog>
  <changelog author="linwenkai &lt;linwenkai6@hisilicon.com&gt; 2.3.20-2" date="1637755200">- libwd: add missing head files and fix install path</changelog>
  <changelog author="linwenkai &lt;linwenkai6@hisilicon.com&gt; 2.3.21-1" date="1638792000">- libwd: update uadk from 2.3.20 to 2.3.21</changelog>
  <changelog author="Yang Shen &lt;shenyang39@huawei.com&gt; 2.3.21-2" date="1641297600">- libwd: backport the patch of uadk from 2.3.21 to 2.3.24</changelog>
  <changelog author="Yang Shen &lt;shenyang39@huawei.com&gt; 2.3.21-3" date="1645444800">- libwd: backport the patch of uadk from 2.3.24 to 2.3.27</changelog>
  <changelog author="Yang Shen &lt;shenyang39@huawei.com&gt; 2.3.21-4" date="1646136000">- libwd: backport the patch of uadk from 2.3.27 to 2.3.28</changelog>
  <changelog author="Yang Shen &lt;shenyang39@huawei.com&gt; 2.3.21-5" date="1647864000">- libwd: backport the patch of uadk from 2.3.28 to 2.3.31</changelog>
  <changelog author="Yang Shen &lt;shenyang39@huawei.com&gt; 2.3.21-6" date="1658836800">- libwd: backport the patch of uadk from 2.3.31 to 2.3.36</changelog>
  <changelog author="Yang Shen &lt;shenyang39@huawei.com&gt; 2.3.37-1" date="1665403200">- libwd: update the source code to 2.3.37</changelog>
  <changelog author="Yang Shen &lt;shenyang39@huawei.com&gt; 2.3.37-2" date="1671105600">- libwd: fix a bug for ecc</changelog>
</package>
<package pkgid="608fcd64a96428097db43bf133c048d91f2e03653981184a95e64a3239f25da5" name="libwebp" arch="src">
  <version epoch="0" ver="1.2.1" rel="3.oe2203sp1"/>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 1.2.1-1" date="1638360000">- update to 1.2.1</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1.2.1-2" date="1666785600">- Rebuild for next release</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1.2.1-3" date="1685102400">- fix CVE-2023-1999</changelog>
</package>
<package pkgid="6c8c22b99baa0c9171e6051f78b89573e3783e86034e116996ff4c8371921d1e" name="libwebp" arch="src">
  <version epoch="0" ver="1.2.1" rel="4.oe2203sp1"/>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 1.2.1-1" date="1638360000">- update to 1.2.1</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1.2.1-2" date="1666785600">- Rebuild for next release</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1.2.1-3" date="1685102400">- fix CVE-2023-1999</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1.2.1-4" date="1694779200">- fix CVE-2023-4863</changelog>
</package>
<package pkgid="f7a85cf5bd0079d47117578885b152fcc300f6d442199ca47b2db509bea2a49a" name="libxml2" arch="src">
  <version epoch="0" ver="2.9.14" rel="10.oe2203sp1"/>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.9.14-1" date="1657713600">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:Upgrade to upstream v2.9.14 and Cleanup duplicate installation</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.9.14-2" date="1663070400">- Fix Obsoletes in spec</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.9.14-3" date="1667908800">- fix CVE-2022-40303 CVE-2022-40304</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.9.14-4" date="1669032000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport upstream patches</changelog>
  <changelog author="BruceGW &lt;gyl93216@163.com&gt; - 2.9.14-5" date="1681992000">- Type:CVE
- CVE:CVE-2023-28484 CVE-2023-29469
- SUG:NA
- DESC:fix CVE-2023-28484CVE-2023-29469</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.9.14-6" date="1686225600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport upstream patches</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.9.14-7" date="1687176000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:revert parser-Fix-progress-check</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.9.14-8" date="1693569600">- SAX: Always initialize SAX1 element handlers</changelog>
  <changelog author="BruceGW &lt;gyl93216@163.com&gt; -2.9.14-9" date="1697457600">- Type:CVE
- CVE:CVE-2023-45322
- SUG:NA
- DESC:fix CVE-2023-45322</changelog>
  <changelog author="BruceGW &lt;gyl93216@163.com&gt; - 2.9.14-10" date="1708257600">- Type:CVE
- SUG:NA
- DESC:fix CVE-2024-25062</changelog>
</package>
<package pkgid="c2164cd656d551171e0aacc1c76320a1aab4c6010a16a9f47666531ce6251aee" name="libxml2" arch="src">
  <version epoch="0" ver="2.9.14" rel="13.oe2203sp1"/>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.9.14-4" date="1669032000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport upstream patches</changelog>
  <changelog author="BruceGW &lt;gyl93216@163.com&gt; - 2.9.14-5" date="1681992000">- Type:CVE
- CVE:CVE-2023-28484 CVE-2023-29469
- SUG:NA
- DESC:fix CVE-2023-28484CVE-2023-29469</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.9.14-6" date="1686225600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport upstream patches</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.9.14-7" date="1687176000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:revert parser-Fix-progress-check</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.9.14-8" date="1693569600">- SAX: Always initialize SAX1 element handlers</changelog>
  <changelog author="BruceGW &lt;gyl93216@163.com&gt; -2.9.14-9" date="1697457600">- Type:CVE
- CVE:CVE-2023-45322
- SUG:NA
- DESC:fix CVE-2023-45322</changelog>
  <changelog author="BruceGW &lt;gyl93216@163.com&gt; - 2.9.14-10" date="1708257600">- Type:CVE
- SUG:NA
- DESC:fix CVE-2024-25062</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.9.14-11" date="1714996800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport upstream patches</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 2.9.14-12" date="1715860800">- Type:CVE
- CVE:CVE-2024-34459
- SUG:NA
- DESC:fix CVE-2024-34459</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.9.14-13" date="1716033600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport upstream patches</changelog>
</package>
<package pkgid="1c65dcda1163d2dd80528ab3f0199c4a3620121920ec4c669ea230ee3abe04be" name="libxml2" arch="src">
  <version epoch="0" ver="2.9.14" rel="5.oe2203sp1"/>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.9.12-4" date="1644667200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:use upstream patch refix heap-use-after-free in xmlAddNextSibling and xmlAddChild</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.9.12-5" date="1646827200">- Type:CVE
- ID:CVE-2022-23308
- SUG:NA
- DESC:fix CVE-2022-23308</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.9.12-6" date="1652097600">- Type:CVE
- ID:CVE-2022-29824
- SUG:NA
- DESC:fix CVE-2022-29824</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.9.12-7" date="1655380800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Fix memory leaks for xmlACatalogAdd</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.9.12-8" date="1656072000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Fix memory leaks in xmlACatalogAdd when xmlHashAddEntry failed</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.9.14-1" date="1657713600">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:Upgrade to upstream v2.9.14 and Cleanup duplicate installation</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.9.14-2" date="1663070400">- Fix Obsoletes in spec</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.9.14-3" date="1667908800">- fix CVE-2022-40303 CVE-2022-40304</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.9.14-4" date="1669032000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport upstream patches</changelog>
  <changelog author="BruceGW &lt;gyl93216@163.com&gt; - 2.9.14-5" date="1681992000">- Type:CVE
- CVE:CVE-2023-28484 CVE-2023-29469
- SUG:NA
- DESC:fix CVE-2023-28484CVE-2023-29469</changelog>
</package>
<package pkgid="b8223eeb483297e0e5b68ab99e8d9d4cd4a09cbf8d85a8edda20b37f73803280" name="libxml2" arch="src">
  <version epoch="0" ver="2.9.14" rel="9.oe2203sp1"/>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.9.12-8" date="1656072000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Fix memory leaks in xmlACatalogAdd when xmlHashAddEntry failed</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.9.14-1" date="1657713600">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:Upgrade to upstream v2.9.14 and Cleanup duplicate installation</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.9.14-2" date="1663070400">- Fix Obsoletes in spec</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.9.14-3" date="1667908800">- fix CVE-2022-40303 CVE-2022-40304</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.9.14-4" date="1669032000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport upstream patches</changelog>
  <changelog author="BruceGW &lt;gyl93216@163.com&gt; - 2.9.14-5" date="1681992000">- Type:CVE
- CVE:CVE-2023-28484 CVE-2023-29469
- SUG:NA
- DESC:fix CVE-2023-28484CVE-2023-29469</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.9.14-6" date="1686225600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport upstream patches</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.9.14-7" date="1687176000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:revert parser-Fix-progress-check</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.9.14-8" date="1693569600">- SAX: Always initialize SAX1 element handlers</changelog>
  <changelog author="BruceGW &lt;gyl93216@163.com&gt; -2.9.14-9" date="1697457600">- Type:CVE
- CVE:CVE-2023-45322
- SUG:NA
- DESC:fix CVE-2023-45322</changelog>
</package>
<package pkgid="737f16fae395959ce30debd0097a131e803608e78fe8ca065ea666a279969462" name="linux-firmware" arch="src">
  <version epoch="0" ver="20240811" rel="1.oe2203sp1"/>
  <changelog author="zhaoxiaohu &lt;zhaoxiaohu@kuaishou.com&gt; - 20211027-3" date="1723032000">- fix build install need use copy-firmware.sh ice Intel(R) E810 Series intel/ice/ddp/ice.pkg -&gt; ice-1.3.26.0.pkg</changelog>
  <changelog author="wangxiao &lt;wangxiao184@h-partners.com&gt; - 20240811-1" date="1725019200">- update to 20240811
- linux-firmware has changed python to python3, so remove this patch</changelog>
</package>
<package pkgid="ff83485bfc8e28647f8ec21ec8979e769d813284cbb58aa6abf2fa978203082b" name="linux-sgx" arch="src">
  <version epoch="0" ver="2.15.1" rel="11.oe2203sp1"/>
  <changelog author="houmingyong &lt;houmingyong@huawei.com&gt; - 2.15.1-2" date="1653912000">- add secure compilation options</changelog>
  <changelog author="zhengxiaoxiao &lt;zhengxiaoxiao2@huawei.com&gt; - 2.15.1-3" date="1655899200">- sgx-aesm-service exclude /var/opt/aesmd/data</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-4" date="1656331200">- backport openssl CVE-2022-0778 and CVE-2022-1292, protobuf CVE-2021-22570</changelog>
  <changelog author="houmingyong&lt;houmingyong@huawei.com&gt; - 2.15.1-5" date="1661601600">- backport openssl CVE-2022-2068 and CVE-2022-2097</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-6" date="1662724800">- DCAP disabling the rpatch option</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-7" date="1663675200">- add strip compilation option for pck-id-retrieval-tool</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-8" date="1664020800">- The postun script should distinguish uninstall and upgrade scenarios</changelog>
  <changelog author="houmingyong&lt;houmingyong@huawei.com&gt; - 2.15.1-9" date="1698494400">- backport patch and cve</changelog>
  <changelog author="wangqingsan&lt;wangqingsan@huawei.com&gt; - 2.15.1-10" date="1702987200">- backport patch and cve</changelog>
  <changelog author="wangqingsan&lt;wangqingsan@huawei.com&gt; - 2.15.1-11" date="1703592000">- Disabling the Automatic Startup of Software Package Upgrade</changelog>
</package>
<package pkgid="82317c775b369ae711d5edd9042620c4285d9670f8e6dd24b54d0f4fbfd3206c" name="linux-sgx" arch="src">
  <version epoch="0" ver="2.15.1" rel="8.oe2203sp1"/>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 2.15.1-1" date="1639051200">- init</changelog>
  <changelog author="houmingyong &lt;houmingyong@huawei.com&gt; - 2.15.1-2" date="1653912000">- add secure compilation options</changelog>
  <changelog author="zhengxiaoxiao &lt;zhengxiaoxiao2@huawei.com&gt; - 2.15.1-3" date="1655899200">- sgx-aesm-service exclude /var/opt/aesmd/data</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-4" date="1656331200">- backport openssl CVE-2022-0778 and CVE-2022-1292, protobuf CVE-2021-22570</changelog>
  <changelog author="houmingyong&lt;houmingyong@huawei.com&gt; - 2.15.1-5" date="1661601600">- backport openssl CVE-2022-2068 and CVE-2022-2097</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-6" date="1662724800">- DCAP disabling the rpatch option</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-7" date="1663675200">- add strip compilation option for pck-id-retrieval-tool</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 2.15.1-8" date="1664020800">- The postun script should distinguish uninstall and upgrade scenarios</changelog>
</package>
<package pkgid="6852fd96d6438ba6d701eebe6d828130f3fd0fc0aa9e5ce8053ff0b30031b589" name="linux-sgx-driver" arch="src">
  <version epoch="0" ver="2.14" rel="2.oe2203sp1"/>
  <changelog author="chenmaodong &lt;chenmaodong@huawei.com&gt; - 2.11.3" date="1609156800">- Fix compilation on 5.8 kernel</changelog>
  <changelog author="zhangguangzhi &lt;zhangguangzhi3@huawei.com&gt; - 2.11.4" date="1625140800">- add buildrequires uname-build-checks</changelog>
  <changelog author="chenmaodong &lt;chenmaodong@huawei.com&gt; - 2.11.5" date="1626696000">- set the requiers of kernel version with linux-sgx-driver building environment kernel</changelog>
  <changelog author="zhangguangzhi &lt;zhangguangzhi3@huawei.com&gt; - 2.14-1" date="1667476800">- update to 2.14</changelog>
</package>
<package pkgid="ed309d36f052efabf1062f0bbd939d2838a4cd4af34f654034f1223f4d7421a1" name="linuxptp" arch="src">
  <version epoch="0" ver="2.0" rel="6.oe2203sp1"/>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.0-6" date="1706616000">- Remove bogus command line option</changelog>
</package>
<package pkgid="5b01612508eb220812589e43240cd31e34b25f85549a38bb6119a771c3da2472" name="llvm" arch="src">
  <version epoch="0" ver="12.0.1" rel="6.oe2203sp1"/>
  <changelog author="zhangruifang &lt;zhangruifang1@h-partners.com&gt; - 12.0.1-3" date="1667304000">- Type: enhancement
- ID: NA
- SUG: NA
- DESC: Disabe DLLVM_BUILD_TEST</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 12.0.1-4" date="1671624000">- Type: Compile Option
- ID: NA
- SUG: NA
- DESC: Add -fPIE and -pie options</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 12.0.1-5" date="1693396800">- Type: enhancement
- ID: NA
- SUG: NA
- DESC: Add loongarch support</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 12.0.1-6" date="1709985600">- Type: Requires
- ID: NA
- SUG: NA
- DESC: add llvm and llvm-devel requires pkg llvm-libs</changelog>
</package>
<package pkgid="cba2cc0b910a77f82ebb36bf1971f5ad6d58dd6a98bdc9d4ba79cef73b339ef8" name="llvm" arch="src">
  <version epoch="0" ver="12.0.1" rel="7.oe2203sp1"/>
  <changelog author="zhangruifang &lt;zhangruifang1@h-partners.com&gt; - 12.0.1-3" date="1667304000">- Type: enhancement
- ID: NA
- SUG: NA
- DESC: Disabe DLLVM_BUILD_TEST</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 12.0.1-4" date="1671624000">- Type: Compile Option
- ID: NA
- SUG: NA
- DESC: Add -fPIE and -pie options</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 12.0.1-5" date="1693396800">- Type: enhancement
- ID: NA
- SUG: NA
- DESC: Add loongarch support</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 12.0.1-6" date="1709985600">- Type: Requires
- ID: NA
- SUG: NA
- DESC: add llvm and llvm-devel requires pkg llvm-libs</changelog>
  <changelog author="liyunfei &lt;liyunfei33@huawei.com&gt; - 12.0.1-7" date="1712664000">- Type: CVE
- ID: NA
- SUG: NA
- Backport patch to fix CVE-2023-46049</changelog>
</package>
<package pkgid="9351d6b2dd205593074c157c8f20bd561b0555eb49af3e186c3abbd260a97510" name="llvm-bolt" arch="src">
  <version epoch="0" ver="15.0.7" rel="1.oe2203sp1"/>
  <changelog author="liyancheng &lt;412998149@qq.com&gt;" date="1638187200">- Type:Init
- ID:NA
- SUG:NA
- DESC:Init llvm-bolt repository</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; 0-1.20211016.gitb72f753" date="1671451200">- Type:fix
- ID:NA
- SUG:NA
- DESC: Add debuginfo package and delete rpath in binary</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; 0-2.20211016.gitb72f753" date="1686830400">- Type:backport
- ID:NA
- SUG:NA
- DESC: Handle data at the beginning of a function when disassembling and building CFG.</changelog>
  <changelog author="zhenyu zhao &lt;zhaozhenyu17@huaiwei.com&gt; 15.0.7-1" date="1693483200">- Type:Update
- ID:NA
- SUG:NA
- DESC: Update llvm-bolt from llvm-bolt to llvm-bolt-15</changelog>
</package>
<package pkgid="cdbbd9344669d5697f1c16f333cd1f58d083753615a6f6cfb00a96d1527666fe" name="llvm-bolt" arch="src">
  <version epoch="0" ver="15.0.7" rel="2.oe2203sp1"/>
  <changelog author="liyancheng &lt;412998149@qq.com&gt;" date="1638187200">- Type:Init
- ID:NA
- SUG:NA
- DESC:Init llvm-bolt repository</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; 0-1.20211016.gitb72f753" date="1671451200">- Type:fix
- ID:NA
- SUG:NA
- DESC: Add debuginfo package and delete rpath in binary</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; 0-2.20211016.gitb72f753" date="1686830400">- Type:backport
- ID:NA
- SUG:NA
- DESC: Handle data at the beginning of a function when disassembling and building CFG.</changelog>
  <changelog author="zhenyu zhao &lt;zhaozhenyu17@huaiwei.com&gt; 15.0.7-1" date="1693483200">- Type:Update
- ID:NA
- SUG:NA
- DESC: Update llvm-bolt from llvm-bolt to llvm-bolt-15</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; 15.0.7-2" date="1694088000">- Type:Update
- ID:NA
- SUG:NA
- DESC: Backport bugfix and add AArch64 support for hugify and inline.</changelog>
</package>
<package pkgid="d9b5e532cc39939ccfdbf730c7f2645c5cd1ac73c7ebdb70a1d7c74316db3bb8" name="logback" arch="src">
  <version epoch="0" ver="1.2.8" rel="3.oe2203sp1"/>
  <changelog author="houyingchao &lt;houyingchao@huawei.com&gt; - 1.2.8-1" date="1640606400">- Upgrade to 1.2.8
- Fix CVE-2021-42550</changelog>
  <changelog author="Chenyx &lt;chenyixiong3@huawei.com&gt; - 1.2.8-2" date="1659960000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.2.8-3" date="1702382400">- Fix CVE-2023-6378,CVE-2023-6481</changelog>
</package>
<package pkgid="0e7b91404161d151926e1362b308da593e6d9d60633f1a2fd1a5ada3214a93b6" name="lua" arch="src">
  <version epoch="0" ver="5.4.3" rel="11.oe2203sp1"/>
  <changelog author="liudabo &lt;liudabo1@huawei.com&gt; - 5.4.3-2" date="1640865600">- add liblua-5.3.so file</changelog>
  <changelog author="shixuantong &lt;shixuantong@huawei.com&gt; - 5.4.3-3" date="1642075200">- delete liblua-5.3.so file</changelog>
  <changelog author="shixuantong &lt;shixuantong@h-partners.com&gt; - 5.4.3-4" date="1648814400">- fix CVE-2021-43519</changelog>
  <changelog author="shixuantong &lt;shixuantong@h-partners.com&gt; - 5.4.3-5" date="1649937600">- fix CVE-2021-43519 patch error</changelog>
  <changelog author="shixuantong &lt;shixuantong@h-partners.com&gt; - 5.4.3-6" date="1650024000">- fix CVE-2021-44647 CVE-2022-28805</changelog>
  <changelog author="renhongxun &lt;renhongxun@h-partners.com&gt; - 5.4.3-7" date="1658145600">- fix CVE-2022-33099</changelog>
  <changelog author="shixuantong &lt;shixuantong@h-partners.com&gt; - 5.4.3-8" date="1660910400">- fix CVE-2021-44964</changelog>
  <changelog author="renhongxun &lt;renhongxun@h-partners.com&gt; - 5.4.3-9" date="1663761600">- bugfix with upstream patch</changelog>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt; - 5.4.3-10" date="1672056000">- add support for LoongArch</changelog>
  <changelog author="chenziyang &lt;chenziyang4@huawei.com&gt; - 5.4.3-11" date="1681819200">- fix CVE-2021-45985 and other commits because CVE change heavily rely on these commits</changelog>
</package>
<package pkgid="82045196ce32ea0d2e6b182f26a4c5ef024e298e81e8d8e649e30fb83dc2b5f5" name="lwip" arch="src">
  <version epoch="0" ver="2.1.3" rel="104.oe2203sp1"/>
  <changelog author="wuchangye &lt;wuchangye@huawei.com&gt; - 2.1.3-95" date="1702123200">- fix the coredump issue when UDP traffic is sent</changelog>
  <changelog author="hankangkang &lt;hankangkang5@huawei.com&gt; - 2.1.3-96" date="1702555200">- modfiy-accept-null-pointer-when-new-conn-receive-RST-packet-in-listening</changelog>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 2.1.3-97" date="1702641600">- lwip log: fix reversed port in tcp_input</changelog>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 2.1.3-98" date="1703073600">- event_callback: del errevent log if err is ERR_OK</changelog>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 2.1.3-99" date="1703332800">- tcp_send_fin: add the fin to the last unsent segment</changelog>
  <changelog author="hankangkang &lt;hankangkang5@huawei.com&gt; - 2.1.3-100" date="1703505600">- Mod the issue that 2w connection unable to establish</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 2.1.3-101" date="1703592000">- remove duplicate lwip log</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 2.1.3-102" date="1703592001">- fix rte_ring_create/free time-consuming</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 2.1.3-103" date="1703851200">- rte_ring_get_memsize adapt dpdk 19.11</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 2.1.3-104" date="1704196800">- tcp_in: fix ooseq update error</changelog>
</package>
<package pkgid="e091363ec8f91bfd84537b705b50fad0f21a0f3df407b913e3982d50e402200a" name="lwip" arch="src">
  <version epoch="0" ver="2.1.3" rel="39.oe2203sp1"/>
  <changelog author="wuchangsheng&lt;wuchangsheng2@huawei.com&gt; - 2.1.3-30" date="1670932800">- optimite pcb unsent and unacked list
  fast rexmit all pkts</changelog>
  <changelog author="wuchangsheng&lt;wuchangsheng2@huawei.com&gt; - 2.1.3-31" date="1671364800">- expand rcv wnd size and add prefetch</changelog>
  <changelog author="kircher&lt;majun65@huawei.com&gt; - 2.1.3-32" date="1671451200">- skip unnecessary tcp_route</changelog>
  <changelog author="wuchangsheng&lt;wuchangsheng2@huawei.com&gt; - 2.1.3-33" date="1671537600">- add variable in struct sock</changelog>
  <changelog author="kircher&lt;majun65@huawei.com&gt; - 2.1.3-34" date="1671537601">- add dataack when recv too many acks with data</changelog>
  <changelog author="kircher&lt;majun65@huawei.com&gt; - 2.1.3-35" date="1671537602">- fix the dataack is always lower than 256</changelog>
  <changelog author="kircher&lt;majun65@huawei.com&gt; - 2.1.3-36" date="1671624000">- do not update cwnd when send dataack</changelog>
  <changelog author="wuchangsheng&lt;wuchangsheng2@huawei.com&gt; - 2.1.3-37" date="1671624001">- reduce struct pbuf size</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 2.1.3-38" date="1671624002">- move pcb_if to ip_pcb to let listen pcb can use it</changelog>
  <changelog author="wuchangsheng&lt;wuchangsheng2@huawei.com&gt; - 2.1.3-39" date="1672401600">- expand recv mbox size</changelog>
</package>
<package pkgid="13a8a0be6569093391c479ff86091b31963c1d279c6bd2a776e3697eddbc54b0" name="lwip" arch="src">
  <version epoch="0" ver="2.1.3" rel="51.oe2203sp1"/>
  <changelog author="Lemmy Huang &lt;huangliming5@huawei.com&gt; - 2.1.3-44" date="1678363200">- cleancode: improve lwipopts.h readability</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 2.1.3-45" date="1678449600">- reduce cpu usage when send</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 2.1.3-46" date="1678708800">- use pbuf lock when aggregate pbuf</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 2.1.3-47" date="1678708801">- fix tso small packet drop in kernel server</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 2.1.3-48" date="1678708802">- add same node ring &amp; gazellectl -a</changelog>
  <changelog author="kircher &lt;majun65@huawei.com&gt; - 2.1.3-49" date="1679486400">- lwip send recv thread bind numa</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 2.1.3-50" date="1680350400">- fix last_unsent/last_unacked error
- fix send failed due to pcb-&gt;nrtx &gt; TCP_MAXRTX</changelog>
  <changelog author="kircher &lt;majun65@huawei.com&gt; - 2.1.3-51" date="1683892800">- add udp multicast support in lwip</changelog>
</package>
<package pkgid="db3bedec621e1865cc71f1e4f965bacd4d004938f6d35626a121e3e957bbb022" name="lwip" arch="src">
  <version epoch="0" ver="2.1.3" rel="75.oe2203sp1"/>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 2.1.3-66" date="1686052800">- revert cleancode series patches</changelog>
  <changelog author="Lemmy Huang &lt;huangliming5@huawei.com&gt; - 2.1.3-67" date="1686139200">- optimize: avoid too many empty acks in tcp_input</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 2.1.3-68" date="1686744000">- fix udp send/recv in mutiple queue</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 2.1.3-69" date="1686744001">- fix udp recvmbox size not set</changelog>
  <changelog author="Lemmy Huang &lt;huangliming5@huawei.com&gt; - 2.1.3-70" date="1686830400">- adapt to dpdk-19.11 and dpdk-21.11</changelog>
  <changelog author="Lemmy Huang &lt;huangliming5@huawei.com&gt; - 2.1.3-71" date="1686830401">- patch -p1 automaition in lwip.spec</changelog>
  <changelog author="Lemmy Huang &lt;huangliming5@huawei.com&gt; - 2.1.3-72" date="1686830402">- fix null pointer when zero port listen</changelog>
  <changelog author="kircher &lt;majun65@huawei.com&gt; - 2.1.3-73" date="1687348800">- enable udp cksum in lwip</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 2.1.3-74" date="1687694400">- add error check in hugepage_init and sys_mbox_free</changelog>
  <changelog author="kircher &lt;majun65@huawei.com&gt; - 2.1.3-75" date="1687867200">- add CHECKSUM_UDP when not support OFFLOAD_UDP_CHECKS</changelog>
</package>
<package pkgid="ddce2b03a3b5f58ad5b40ad3410b5d7a06a47a2387697def2d5a1072766c2b41" name="lwip" arch="src">
  <version epoch="0" ver="2.2.0" rel="32.oe2203sp1"/>
  <changelog author="hankangkang &lt;hankangkang5@huawei.com&gt; - 2.2.0-27" date="1715256000">- mod checksum of ip_hdr and udp_hdr</changelog>
  <changelog author="ningjin &lt;ningjin@kylinos.cn&gt; - 2.2.0-28" date="1716292800">- change change STAT_COUNTER from u16 to u64</changelog>
  <changelog author="zhengjiebing &lt;zhengjiebing@cmss.chinamobile.com&gt; - 2.2.0-29" date="1716552000">- fix vlan filter bug</changelog>
  <changelog author="yinbin &lt;yinbin8@huawei.com&gt; - 2.2.0-30" date="1718452800">- reduce pbuf pool size</changelog>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 2.2.0-31" date="1718625600">- lwip_sock: add sock_time_stamp</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 2.2.0-32" date="1718625601">- distinguish tcp/udp from sendring</changelog>
</package>
<package pkgid="d510005bc2a936ec72512e07838c05b84822f775f23f5f90bf610804c6ee223a" name="lwip" arch="src">
  <version epoch="0" ver="2.2.0" rel="36.oe2203sp1"/>
  <changelog author="hankangkang &lt;hankangkang5@huawei.com&gt; - 2.2.0-35" date="1719316800">- virtio: record local_port for distributing pkts in virtio_user.</changelog>
  <changelog author="wanfeng &lt;wanfeng@kylinos.cn&gt; - 2.2.0-36" date="1719576000">- add MCAST_MSFILTER to setsockopt for IGMPv3</changelog>
</package>
<package pkgid="c3a926cfd938b6c9b3ba1ea433cabe4653a509e014b72289ae6c62c37e7aa3c5" name="lwip" arch="src">
  <version epoch="0" ver="2.2.0" rel="53.oe2203sp1"/>
  <changelog author="LemmyHuang &lt;huangliming5@huawei.com&gt; - 2.2.0-44" date="1721304000">- cleancode: refactor lwipgz_hlist.h</changelog>
  <changelog author="LemmyHuang &lt;huangliming5@huawei.com&gt; - 2.2.0-45" date="1721304001">- cleancode: move options from opt.h to lwipopts.h</changelog>
  <changelog author="LemmyHuang &lt;huangliming5@huawei.com&gt; - 2.2.0-46" date="1721390400">- cleancode: move tcp_hash_table to lwipgz_tcp_priv.h</changelog>
  <changelog author="LemmyHuang &lt;huangliming5@huawei.com&gt; - 2.2.0-47" date="1721390401">- cleancode: refactor sys_now and lwip_ioctl</changelog>
  <changelog author="LemmyHuang &lt;huangliming5@huawei.com&gt; - 2.2.0-48" date="1721390402">- cleancode: refactor memp</changelog>
  <changelog author="LemmyHuang &lt;huangliming5@huawei.com&gt; - 2.2.0-49" date="1721736000">- cleancode: refactor offload
- enable sys_arch failed log</changelog>
  <changelog author="yinbin &lt;yinbin8@huawei.com&gt; - 2.2.0-50" date="1721822400">- LOOPBACK: fix loop coredump</changelog>
  <changelog author="yinbin &lt;yinbin8@huawei.com&gt; - 2.2.0-51" date="1722686400">- INIT:fix lwip_init failed because of dpdk set errno</changelog>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 2.2.0-52" date="1723550400">- fix the definition of IPV6_V6ONLY</changelog>
  <changelog author="yinbin &lt;yinbin8@huawei.com&gt; - 2.2.0-53" date="1724155200">- check if mem_init returns errno</changelog>
</package>
<package pkgid="7abd38c201988b497fd5fd14637b77d8edeb43abd82530376a9a8e4ecb78346c" name="lxc" arch="src">
  <version epoch="0" ver="4.0.3" rel="2022102408.oe2203sp1"/>
  <changelog author="Neil.wrz&lt;wangrunze13@huawei.com&gt; - 4.0.3-2022092001" date="1663675200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: do mask paths after parent mounted</changelog>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 4.0.3-2022101101" date="1665489600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: skip kill cgroup processes if no hierarchies</changelog>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 4.0.3-2022101701" date="1666008000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: update version to 4.0.3-2022101701</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 4.0.3-2022102401" date="1666612800">- Type:feature
- CVE:NA
- SUG:NA
- DESC:Add sw64 architecture</changelog>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 4.0.3-2022102403" date="1669291200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: add macro to adapt musl libc</changelog>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 4.0.3-2022102404" date="1669982400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: add lxc-attach add-gids option</changelog>
  <changelog author="huangsong&lt;huangsong14@huawei.com&gt; - 4.0.3-2022102405" date="1671192000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: change the suffi parameter in lxc attach --help output</changelog>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 4.0.3-2022102406" date="1672056000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: rollback strprint code modified</changelog>
  <changelog author="zhongtao&lt;zhongtao17@huawei.com&gt; - 4.0.3-2022102407" date="1672833600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: add sscanf adapation code for musl</changelog>
  <changelog author="wangrunze&lt;wangrunze13@huawei.com&gt; - 4.0.3-2022102408" date="1673611200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: fix cve CVE-2022-47952 log leaks root information</changelog>
</package>
<package pkgid="d30cb85260f9eaa85e9c15530165a2457e95c31bb00ce8e00620af6ff62c77f5" name="lxc" arch="src">
  <version epoch="0" ver="4.0.3" rel="2022102423.oe2203sp1"/>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 4.0.3-2022102414" date="1677931200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC: add loongarch64 support for lxc</changelog>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 4.0.3-2022102415" date="1680177600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: use ocihooks env after getenv</changelog>
  <changelog author="wangrunze&lt;wangrunze13@huawei.com&gt; - 4.0.3-2022102416" date="1681732800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: fix mixed use of signed and unsigned type</changelog>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 4.0.3-2022102417" date="1682078400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: remove unused meminfo stats</changelog>
  <changelog author="Jian Zhang&lt;zhang_jian7@hoperun.com&gt; - 4.0.3-2022102418" date="1683201600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: fix lost return codes of spawned processe</changelog>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 4.0.3-2022102419" date="1683374400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: fix load bpf failed</changelog>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 4.0.3-2022102420" date="1686916800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: fix mount device path incorrect</changelog>
  <changelog author="mzzhou&lt;1362843687@qq.com&gt; - 4.0.3-2022102421" date="1688990400">- Type:enhancement
- ID:NA
- SUG:NA
- DESC: add secure compile macro</changelog>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 4.0.3-2022102422" date="1694001600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: codecheck fix</changelog>
  <changelog author="zhongtao&lt;zhongtao17@huawei.com&gt; - 4.0.3-2022102423" date="1694433600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: containers in the FREEZING state also need to be unfreeze</changelog>
</package>
<package pkgid="8afa608d58bf2543ad459293b33ea9721953ae14e50846a9fe90dade61ce6fb9" name="lxc" arch="src">
  <version epoch="0" ver="4.0.3" rel="2022102425.oe2203sp1"/>
  <changelog author="wangrunze&lt;wangrunze13@huawei.com&gt; - 4.0.3-2022102416" date="1681732800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: fix mixed use of signed and unsigned type</changelog>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 4.0.3-2022102417" date="1682078400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: remove unused meminfo stats</changelog>
  <changelog author="Jian Zhang&lt;zhang_jian7@hoperun.com&gt; - 4.0.3-2022102418" date="1683201600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: fix lost return codes of spawned processe</changelog>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 4.0.3-2022102419" date="1683374400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: fix load bpf failed</changelog>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 4.0.3-2022102420" date="1686916800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: fix mount device path incorrect</changelog>
  <changelog author="mzzhou&lt;1362843687@qq.com&gt; - 4.0.3-2022102421" date="1688990400">- Type:enhancement
- ID:NA
- SUG:NA
- DESC: add secure compile macro</changelog>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 4.0.3-2022102422" date="1694001600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: codecheck fix</changelog>
  <changelog author="zhongtao&lt;zhongtao17@huawei.com&gt; - 4.0.3-2022102423" date="1694433600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: containers in the FREEZING state also need to be unfreeze</changelog>
  <changelog author="jikai&lt;jikai11@huawei.com&gt; - 4.0.3-2022102424" date="1699358400">- Type:enhancement
- ID:NA
- SUG:NA
- DESC: Add succeed message info for ocihook</changelog>
  <changelog author="jikai&lt;jikai11@huawei.com&gt; - 4.0.3-2022102425" date="1702987200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: check cgroup path empty while setting freezer</changelog>
</package>
<package pkgid="365ded4bf86411c6c296c37ac98c9f1bfa0c9c598aa077c98554c25c11bd3a1a" name="lxcfs-tools" arch="src">
  <version epoch="0" ver="0.3" rel="33.oe2203sp1"/>
  <changelog author="wujie &lt;wujie@nj.iscas.ac.cn&gt; - 0.3-31" date="1688385600">- add riscv64 to syscall_linux_64.go build</changelog>
  <changelog author="yangjiaqi &lt;yangjiaqi16@huawei.com&gt; - 0.3-32" date="1703678400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:hide error when isula info is abnormal</changelog>
  <changelog author="yangjiaqi &lt;yangjiaqi16@huawei.com&gt; - 0.3-33" date="1706875200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:support lxcfs reliability for docker</changelog>
</package>
<package pkgid="aa944b787111c614ee3c20ff40e249fe77dc3e5a74e75d741f1a188c8e5b00fa" name="mariadb" arch="src">
  <version epoch="1" ver="10.5.22" rel="1.oe2203sp1"/>
  <changelog author="bzhaoop&lt;bzhaojyathousandy@gmail.com&gt; -4:10.5.15-1" date="1647518400">- Bump to 10.5.15
- For resolving CVEs:
- CVE-2022-24048
- CVE-2022-24052
- CVE-2022-24050
- CVE-2022-24051
- CVE-2021-46668
- CVE-2021-46658</changelog>
  <changelog author="bzhaoop&lt;bzhaojyathousandy@gmail.com&gt; - 4:10.5.15-2" date="1650110400">- Fix the systemd service issue about the env variable.
- Apply the patches from old branch.
- Adaption the cmake version and integrate into the spec file.</changelog>
  <changelog author="bzhaoop&lt;bzhaojyathousandy@gmail.com&gt; - 4:10.5.16-1" date="1653566400">- Bump to 10.5.16 for resolving CVEs below
- CVE-2022-27385
- CVE-2022-27382
- CVE-2022-27451
- CVE-2022-27457
- CVE-2022-27446
- CVE-2022-27455
- CVE-2022-27444
- CVE-2022-27379
- CVE-2022-27386
- CVE-2022-27447
- CVE-2022-27448
- CVE-2022-27449
- CVE-2022-27445
- CVE-2022-27456
- CVE-2022-27458
- CVE-2022-27452
- CVE-2022-27376
- CVE-2022-27378
- CVE-2022-27377
- CVE-2022-27381
- CVE-2022-27383
- CVE-2022-27380
- CVE-2022-27384
- CVE-2022-27387
- And we fit the latest packages for the new mariadb release, such as errmsg package.</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 4:10.5.16-2" date="1666612800">- Add sw64 architecture</changelog>
  <changelog author="ZhengZhenyu&lt;zheng.zhenyu@outlook.com&gt; - 1:10.5.22-1" date="1697457600">- Bump to 10.5.22</changelog>
</package>
<package pkgid="4f669849d30f7faff8b8785fafd5e1a87fb71598acbb68e20a3b92ef54a95362" name="mariadb" arch="src">
  <version epoch="1" ver="10.5.25" rel="1.oe2203sp1"/>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 4:10.5.16-2" date="1666612800">- Add sw64 architecture</changelog>
  <changelog author="ZhengZhenyu&lt;zheng.zhenyu@outlook.com&gt; - 1:10.5.22-1" date="1697457600">- Bump to 10.5.22</changelog>
  <changelog author="xiejing &lt;xiejing@kylinos.cn&gt; - 1:10.5.25-1" date="1716897600">- Bump to 10.5.25 for resolving CVE-2024-21096, CVE-2023-22084
- Fix version description in systemd service file</changelog>
</package>
<package pkgid="3a469f9db47ab9325c88aee55a354c64c0ab75f11bd1847a67963978f9938902" name="metadata-extractor2" arch="src">
  <version epoch="0" ver="2.18.0" rel="1.oe2203sp1"/>
  <changelog author="xigaoxinyan &lt;xigaoxinyan@h-partners.com&gt; - 2.11.0-1" date="1653912000">- Update to 2.11.0</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 2.18.0-1" date="1691668800">- Update to 2.18.0</changelog>
</package>
<package pkgid="424a1f264a6783681822f41cb7e2d7d552707d42b9515a87c13b0a560f0fd23b" name="microcode_ctl" arch="src">
  <version epoch="0" ver="2.1" rel="41.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 2.1-33" date="1632398400">- update version to 2.1-33, fix CVE-2020-24511 CVE-2020-24512</changelog>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 2.1-36" date="1658232000">- Upgrade to 2.1-36
- Fix CVE-2021-0146</changelog>
  <changelog author="luopihui &lt;luopihui@Ncti-gba.cn&gt; - 2.1-37" date="1663934400">- Upgrade to 2.1-37
- Fix CVE-2022-21233</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.1-41" date="1692792000">- Update to 2.1-41 for fix CVE-2022-40982,CVE-2022-38090 and CVE-2022-33196</changelog>
</package>
<package pkgid="b4f11f31245031d7633d3c15046dd15b819e10355cf08fd65632a8d33194876b" name="microcode_ctl" arch="src">
  <version epoch="0" ver="2.1" rel="42.oe2203sp1"/>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 2.1-36" date="1658232000">- Upgrade to 2.1-36
- Fix CVE-2021-0146</changelog>
  <changelog author="luopihui &lt;luopihui@Ncti-gba.cn&gt; - 2.1-37" date="1663934400">- Upgrade to 2.1-37
- Fix CVE-2022-21233</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.1-41" date="1692792000">- Update to 2.1-41 for fix CVE-2022-40982,CVE-2022-38090 and CVE-2022-33196</changelog>
  <changelog author="lwg K &lt;weigangli99@gmail.com&gt; - 2.1-42" date="1700049600">- update to upstream 2.1-42. 20231114
- fix CVE-2023-23583</changelog>
</package>
<package pkgid="26eedd94c71272235e8d07c0de93e057c231f46e2ad0e441dbefd7031dcd992b" name="microcode_ctl" arch="src">
  <version epoch="0" ver="20240312" rel="1.oe2203sp1"/>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 2.1-36" date="1658232000">- Upgrade to 2.1-36
- Fix CVE-2021-0146</changelog>
  <changelog author="luopihui &lt;luopihui@Ncti-gba.cn&gt; - 2.1-37" date="1663934400">- Upgrade to 2.1-37
- Fix CVE-2022-21233</changelog>
  <changelog author="zhaozhen &lt;zhaozhen@loongson.cn&gt; - 2.1-38" date="1668427200">- add loongarch support</changelog>
  <changelog author="liyanan &lt;thistleslyn@163.com&gt; - 2.1-39" date="1692619200">- Fix compilation failure caused by tar upgrade</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.1-41" date="1692792000">- Update to 2.1-41 for fix CVE-2022-40982,CVE-2022-38090 and CVE-2022-33196</changelog>
  <changelog author="lwg K &lt;weigangli99@gmail.com&gt; - 2.1-42" date="1700049600">- update to upstream 2.1-42. 20231114
- fix CVE-2023-23583</changelog>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 20231114-1" date="1704801600">- Modify Source0 to get it form github</changelog>
  <changelog author="peng.zou &lt;peng.zou@shingroup.cn&gt; - 20231114-2" date="1709553600">- add ppc64le support</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 20240312-1" date="1710417600">- Update to 20240312 for fix CVE-2023-38575</changelog>
</package>
<package pkgid="570243ba1767524b91ad885447e9f94a7afb5ce760078b59a94e81e454e9fc33" name="microcode_ctl" arch="src">
  <version epoch="0" ver="20240531" rel="1.oe2203sp1"/>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 2.1-36" date="1658232000">- Upgrade to 2.1-36
- Fix CVE-2021-0146</changelog>
  <changelog author="luopihui &lt;luopihui@Ncti-gba.cn&gt; - 2.1-37" date="1663934400">- Upgrade to 2.1-37
- Fix CVE-2022-21233</changelog>
  <changelog author="zhaozhen &lt;zhaozhen@loongson.cn&gt; - 2.1-38" date="1668427200">- add loongarch support</changelog>
  <changelog author="liyanan &lt;thistleslyn@163.com&gt; - 2.1-39" date="1692619200">- Fix compilation failure caused by tar upgrade</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.1-41" date="1692792000">- Update to 2.1-41 for fix CVE-2022-40982,CVE-2022-38090 and CVE-2022-33196</changelog>
  <changelog author="lwg K &lt;weigangli99@gmail.com&gt; - 2.1-42" date="1700049600">- update to upstream 2.1-42. 20231114
- fix CVE-2023-23583</changelog>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 20231114-1" date="1704801600">- Modify Source0 to get it form github</changelog>
  <changelog author="peng.zou &lt;peng.zou@shingroup.cn&gt; - 20231114-2" date="1709553600">- add ppc64le support</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 20240312-1" date="1710417600">- Update to 20240312 for fix CVE-2023-38575, CVE-2023-39368,
  CVE-2023-22655, CVE-2023-43490, CVE-2023-28746</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 20240531-1" date="1718107200">- Update to 20240531 for fix CVE-2023-45733, CVE-2023-45745,
  CVE-2023-46103, CVE-2023-47855</changelog>
</package>
<package pkgid="10550a6a9ac044688118d4edf92c598338f32565eca92846fe5acf08adf9ae96" name="microcode_ctl" arch="src">
  <version epoch="0" ver="20240813" rel="1.oe2203sp1"/>
  <changelog author="zhaozhen &lt;zhaozhen@loongson.cn&gt; - 2.1-38" date="1668427200">- add loongarch support</changelog>
  <changelog author="liyanan &lt;thistleslyn@163.com&gt; - 2.1-39" date="1692619200">- Fix compilation failure caused by tar upgrade</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.1-41" date="1692792000">- Update to 2.1-41 for fix CVE-2022-40982,CVE-2022-38090 and CVE-2022-33196</changelog>
  <changelog author="lwg K &lt;weigangli99@gmail.com&gt; - 2.1-42" date="1700049600">- update to upstream 2.1-42. 20231114
- fix CVE-2023-23583</changelog>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 20231114-1" date="1704801600">- Modify Source0 to get it form github</changelog>
  <changelog author="peng.zou &lt;peng.zou@shingroup.cn&gt; - 20231114-2" date="1709553600">- add ppc64le support</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 20240312-1" date="1710417600">- Update to 20240312 for fix CVE-2023-38575, CVE-2023-39368,
  CVE-2023-22655, CVE-2023-43490, CVE-2023-28746</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 20240531-1" date="1718107200">- Update to 20240531 for fix CVE-2023-45733, CVE-2023-45745,
  CVE-2023-46103, CVE-2023-47855</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 20240531-2" date="1724155200">- License compliance rectification.</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 20240813-1" date="1725451200">- update to 20240813</changelog>
</package>
<package pkgid="1ead06431a6b0ec3f4463a9e84545c7c4a731cb621cb0da611f59ea695c36329" name="microcode_ctl" arch="src">
  <version epoch="0" ver="20240910" rel="1.oe2203sp1"/>
  <changelog author="liyanan &lt;thistleslyn@163.com&gt; - 2.1-39" date="1692619200">- Fix compilation failure caused by tar upgrade</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.1-41" date="1692792000">- Update to 2.1-41 for fix CVE-2022-40982,CVE-2022-38090 and CVE-2022-33196</changelog>
  <changelog author="lwg K &lt;weigangli99@gmail.com&gt; - 2.1-42" date="1700049600">- update to upstream 2.1-42. 20231114
- fix CVE-2023-23583</changelog>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 20231114-1" date="1704801600">- Modify Source0 to get it form github</changelog>
  <changelog author="peng.zou &lt;peng.zou@shingroup.cn&gt; - 20231114-2" date="1709553600">- add ppc64le support</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 20240312-1" date="1710417600">- Update to 20240312 for fix CVE-2023-38575, CVE-2023-39368,
  CVE-2023-22655, CVE-2023-43490, CVE-2023-28746</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 20240531-1" date="1718107200">- Update to 20240531 for fix CVE-2023-45733, CVE-2023-45745,
  CVE-2023-46103, CVE-2023-47855</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 20240531-2" date="1724155200">- License compliance rectification.</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 20240813-1" date="1725451200">- update to 20240813 for fix CVE-2024-24853, CVE-2024-25939,
  CVE-2024-24980, CVE-2023-42667, CVE-2023-49141</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 20240910-1" date="1726056000">- update to 20240910 for fix CVE-2024-24968, CVE-2024-23984</changelog>
</package>
<package pkgid="6ed7f004d6eb8ce486a7001827237fb796de259fea3e7ea5abb2ba0cdab8c495" name="mod_auth_openidc" arch="src">
  <version epoch="0" ver="2.4.13.2" rel="1.oe2203sp1"/>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; 2.4.0.3-4" date="1623326400">- Fix CVE-2021-20718</changelog>
  <changelog author="houyingchao &lt;houyingchao@huawei.com&gt; 2.4.9.4-1" date="1631707200">- Upgrade to 2.4.9.4
- Fix CVE-2021-39191</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.4.13.2-1" date="1681300800">- Update to 2.4.13.2 to fix CVE-2023-28625</changelog>
</package>
<package pkgid="0159bf89bde39e208448503e4764e1a5f2d6abc0edf4cb7596e5cec070ecd010" name="mod_auth_openidc" arch="src">
  <version epoch="0" ver="2.4.15.3" rel="1.oe2203sp1"/>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.4.13.2-1" date="1681300800">- Update to 2.4.13.2 to fix CVE-2023-28625</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.4.15.3-1" date="1708171200">- Upgrade to 2.4.15.3 for fix CVE-2024-24814</changelog>
</package>
<package pkgid="c2d084fa5b50b89d8e249d87d50a4a0523bc3fd1265b1ad9cc62545ed7e298c2" name="mod_http2" arch="src">
  <version epoch="0" ver="1.15.25" rel="3.oe2203sp1"/>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.15.25-2" date="1666180800">- Typebugfix
- ID:NA
- SUG:NA
- DESC:modify description about mod_http2</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.15.25-3" date="1712491200">- Type:cves
- CVE:CVE-2024-27316
- SUG:NA
- DESC:fix CVE-2024-27316</changelog>
</package>
<package pkgid="efe504db58ea8aa94b10c7f9e7d8e1a68005924e5dbe14c73bde887b825488bb" name="mod_security" arch="src">
  <version epoch="0" ver="2.9.5" rel="9.oe2203sp1"/>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2.9.5-3" date="1673006400">- backport use uid if user name is not available</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2.9.5-4" date="1673006401">- backport properly cleanup XML parser contexts upon completion</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2.9.5-5" date="1673092800">- backport Add SecRequestBodyJsonDepthLimit to modsecurity.conf-recommended</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2.9.5-6" date="1673092801">- backport fix memory leak that occurs on JSON parsing error</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2.9.5-7" date="1673092802">- backport Set SecStatusEngine Off in modsecurity.conf-recommended</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2.9.5-8" date="1673265600">- backport allow no-key, single-value JSON body</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.9.5-9" date="1711454400">- Fix CVE-2022-48279</changelog>
</package>
<package pkgid="c70ce906a3b5d730d309307cfa4a3f84260461f8e047d9d13a7768848379ccc2" name="mongo-c-driver" arch="src">
  <version epoch="0" ver="1.13.1" rel="6.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 1.13.1-6" date="1661428800">- Remove rpath</changelog>
</package>
<package pkgid="9567963c63e3813c20b1089bef3b25d854f58e8182c1af62e827b31a87e2843f" name="mongo-c-driver" arch="src">
  <version epoch="0" ver="1.13.1" rel="7.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 1.13.1-6" date="1661428800">- Remove rpath</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.13.1-7" date="1705406400">- Fix CVE-2023-0437</changelog>
</package>
<package pkgid="4818a7d46801480239bd683f901551c5bedb0316d4604536cbda35cd47031ca9" name="mongo-c-driver" arch="src">
  <version epoch="0" ver="1.27.4" rel="1.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 1.13.1-6" date="1661428800">- Remove rpath</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.13.1-7" date="1705406400">- Fix CVE-2023-0437</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1.27.4-1" date="1720699200">- Update to 1.27.4 for fix CVE-2024-6381 and CVE-2024-6383
- libbson Fixes:
  * Fix build with Visual Studio 2013.
  * Fix parsing of colon in timezone.
  * Error on failure to init subdocument in bson_iter_visit_all.
  * Fix string handling in bson_string_new and bson_string_append.
  * Fix iteration in bson_strfreev.
  * Use aligned alloc for bson_array_builder_t
  * Restore support for Sphinx 1.7.6 for man page build.
  * Fix conversion warning with GCC 12.
  * Fixes to some format strings in trace logs.
  * Allow mongoc_buffer_t to be larger than INT_MAX.
  * Add bson_array_builder_t.
- libmongoc Fixes:
  * Fix possible crash reading malformed wire protocol message.
  * Upgraded bundled Zlib from 1.2.3 to 1.3.1
  * Close leftover connections to removed servers.
  * Fix possible crash when client is configured with empty password.
  * Fix possible hang if mongoc_gridfs_file_readv is called with a corrupt chunk with incomplete data.
  * Fix 32-bit compile with 64-bit time_t
  * Restore support for Sphinx 1.7.6 for man page build.
  * Disable shared libmongoc targets if ENABLE_SHARED=OFF
  * Fix documentation build with Python 3.9.
  * Fix data race in mongoc_cursor_get_host.
  * Add back support for BUILD_VERSION CMake option. BUILD_VERSION was unintentionally removed in 1.25.0.
  * Send recoveryToken in transactions when connected to a load balancer.</changelog>
</package>
<package pkgid="a3160870d861f49f79d9e2e688d34d573581ca6e170ed2a6567c593684a72196" name="mozjs91" arch="src">
  <version epoch="0" ver="91.6.0" rel="4.oe2203sp1"/>
  <changelog author="liyanan &lt;liyanan32@huawei.com&gt; - 91.6.0-2" date="1648123200">- remove .oe2203sp1</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 91.6.0-3" date="1693310400">- add support for loongarch64 and sw_64</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 91.6.0-4" date="1711022400">- fix CVEs</changelog>
</package>
<package pkgid="3448f0987cc86bdec64a1b792cf4dbe3039c3a00e3bca1e872dd569caad53269" name="mozjs91" arch="src">
  <version epoch="0" ver="91.6.0" rel="5.oe2203sp1"/>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 91.6.0-3" date="1693310400">- add support for loongarch64 and sw_64</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 91.6.0-4" date="1711022400">- fix CVEs</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 91.6.0-5" date="1717675200">- fix CVEs</changelog>
</package>
<package pkgid="013ae91df699370a6e114405cb1b810d256d824dcde53f8fe41e907cf35e21f8" name="mrtg" arch="src">
  <version epoch="0" ver="2.17.7" rel="3.oe2203sp1"/>
  <changelog author="openEuler Buildteam &lt;buildteam@openeuler.org&gt; - 2.17.7-3" date="1574337600">- Package init</changelog>
</package>
<package pkgid="d91e3ffff55024efca31a451c509e99d493f59e61a0b70c0000e5d78213e8b96" name="mutt" arch="src">
  <version epoch="5" ver="2.2.12" rel="1.oe2203sp1"/>
  <changelog author="yaoxin&lt;yaoxin30@huawei.com&gt; - 1.10.1-7" date="1634299200">- fix CVE-2020-14154</changelog>
  <changelog author="gaihuiying1&lt;gaihuiying@huawei.com&gt; - 2.1.3-1" date="1640692800">- Type:requirement
- Id:NA
- SUG:NA
- DESC:update mutt to 2.1.3</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 2.1.3-2" date="1650801600">- Fix CVE-2022-1328</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 5:2.2.12-1" date="1694692800">- Update to 2.2.12 for fix CVE-2023-4874 and CVE-2023-4875</changelog>
</package>
<package pkgid="7246374ad4609cf92319000d46b26a6d4abc542429438a6e9de4bdb2f79e27a2" name="mutt" arch="src">
  <version epoch="5" ver="2.2.12" rel="2.oe2203sp1"/>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 5:2.2.12-1" date="1694692800">- Update to 2.2.12 for fix CVE-2023-4874 and CVE-2023-4875</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 5:2.2.12-2" date="1722427200">- Fix NULL dereference in crypt gpgme</changelog>
</package>
<package pkgid="d952afb797c4cc57e0e6c1141ccb04dea8036384a6bfa7b249202f948de6ea9f" name="mutter" arch="src">
  <version epoch="0" ver="3.38.4" rel="8.oe2203sp1"/>
  <changelog author="Wenlong Ding &lt;wenlong.ding@turbolinux.com.cn&gt; - 3.38.4-4" date="1660132800">- Add BuildRequires cvt</changelog>
  <changelog author="Wenlong Ding &lt;wenlong.ding@turbolinux.com.cn&gt; - 3.38.4-5" date="1660132801">- add BuildRequires for riscv from &lt;xiaoqian@nj.iscas.ac.cn&gt; @ Wed Jan 12 2022</changelog>
  <changelog author="huajingyun &lt;huajingyun@loongson.cn&gt; - 3.38.4-6" date="1670932800">- add BuildRequires for loongarch64</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 3.38.4-7" date="1671019200">- Add sw64 architecture</changelog>
  <changelog author="hanhuihui&lt;hanhuihui5@huawei.com&gt; - 3.38.4-8" date="1708344000">- rebuild for glib2 without sysprof and add requires sysprof-capture-4</changelog>
</package>
<package pkgid="9cec7849eeffbd2ccb8109efecbf1224d80790d49152e35c47acedfa71e43394" name="mysql" arch="src">
  <version epoch="0" ver="8.0.29" rel="1.oe2203sp1"/>
  <changelog author="maminjie &lt;maminjie1@huawei.com&gt; - 8.0.21-2" date="1600516800">- fix internal compiler error: Segmentation fault</changelog>
  <changelog author="weishengjing &lt;weishengjing1@huawei.com&gt; - 8.0.22-1" date="1606824000">- New version 8.0.22 fix CVES:   CVE-2020-14852 CVE-2020-14794 CVE-2020-14775
   CVE-2020-14893 CVE-2020-14829 CVE-2020-14828 CVE-2020-14888 CVE-2020-14891
   CVE-2020-14812 CVE-2020-14870 CVE-2020-14769 CVE-2020-14878 CVE-2020-14789
   CVE-2020-14821 CVE-2020-14844 CVE-2020-14836 CVE-2020-14830 CVE-2020-14827
   CVE-2020-14773 CVE-2020-14765 CVE-2020-14869 CVE-2020-14776 CVE-2020-14861
   CVE-2020-14866 CVE-2020-14672 CVE-2020-14837 CVE-2020-14771 CVE-2020-14785
   CVE-2020-14838 CVE-2020-14848 CVE-2020-14791 CVE-2020-14793 CVE-2020-14804
   CVE-2020-14777 CVE-2020-14800 CVE-2020-14786 CVE-2020-14845 CVE-2020-14839
   CVE-2020-14846 CVE-2020-14867 CVE-2020-14868 CVE-2020-14873 CVE-2020-14860
   CVE-2020-14814 CVE-2020-14790 CVE-2020-14809</changelog>
  <changelog author="Shengjing Wei &lt;weishengjing1@huawei.com&gt; - 8.0.22-2" date="1610539200">- Delete useless information</changelog>
  <changelog author="wangxiao &lt;wangxiao65@huawei.com&gt; - 8.0.23-1" date="1615377600">- Upgrade mysql to 8.0.23, fix CVES: CVE-2021-1998 CVE-2021-2002
  CVE-2021-2010 CVE-2021-2011 CVE-2021-2016 CVE-2021-2021 CVE-2021-2022
  CVE-2021-2024 CVE-2021-2031 CVE-2021-2032 CVE-2021-2036 CVE-2021-2038
  CVE-2021-2046 CVE-2021-2048 CVE-2021-2056 CVE-2021-2058 CVE-2021-2060
  CVE-2021-2061 CVE-2021-2065 CVE-2021-2070 CVE-2021-2072 CVE-2021-2076
  CVE-2021-2081 CVE-2021-2087 CVE-2021-2088 CVE-2021-2122</changelog>
  <changelog author="wutao &lt;wutao61@huawei.com&gt; - 8.0.24-1" date="1620475200">- Upgrade mysql to 8.0.24, fix CVES: CVE-2021-2166 CVE-2021-2146
  CVE-2021-2162 CVE-2021-2212 CVE-2021-2299 CVE-2021-2293 CVE-2021-2215
  CVE-2021-2278 CVE-2021-2164 CVE-2021-2208 CVE-2021-2217 CVE-2021-2203
  CVE-2021-2226 CVE-2021-2298 CVE-2021-2230 CVE-2021-2300 CVE-2021-2304
  CVE-2021-2172 CVE-2021-2194 CVE-2021-2170 CVE-2021-2196 CVE-2021-2201
  CVE-2021-2180 CVE-2021-2307 CVE-2021-2169 CVE-2021-2171 CVE-2021-2305
  CVE-2021-2179 CVE-2021-2174 CVE-2021-2193 CVE-2021-2232 CVE-2021-2301
  CVE-2021-2308</changelog>
  <changelog author="zhaoyao &lt;zhaoyao32@huawei.com&gt; - 8.0.24-2" date="1623844800">- Fix buiding error: Built target mysqlgcs error
- Add m4 in BuildRequires</changelog>
  <changelog author="liwu &lt;liwu13@huawei.com&gt; - 8.0.26-1" date="1627905600">- Upgrade mysql to 8.0.26,fix CVES:CVE-2021-2356 CVE-2021-2339 CVE-2021-2354
  CVE-2021-2352 CVE-2021-2340</changelog>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 8.0.27-1" date="1635508800">- Upgrade mysql to 8.0.27,fix CVES:CVE-2021-2471 CVE-2021-2478 CVE-2021-2479
  CVE-2021-2481  CVE-2021-35546 CVE-2021-35575 CVE-2021-35577 CVE-2021-35591
  CVE-2021-35596 CVE-2021-35597 CVE-2021-35602 CVE-2021-35604 CVE-2021-35607
  CVE-2021-35608 CVE-2021-35610 CVE-2021-35612 CVE-2021-35618
  CVE-2021-35621-to-CVE-2021-35636 CVE-2021-35638-to-CVE-2021-35642
  CVE-2021-35644-to-CVE-2021-35648</changelog>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 8.0.28-1" date="1643112000">- Upgrade mysql to 8.0.28 to fix cves.</changelog>
  <changelog author="jintang song&lt;jintang.song@epro.com.cn&gt; - 8.0.29-1" date="1652097600">- Upgrade mysql to 8.0.29,fix CVES:'CVE-2022-21423 CVE-2022-21451 
  CVE-2022-21444 CVE-2022-21460 CVE-2022-21417 CVE-2022-21427 CVE-2022-21414 
  CVE-2022-21435 CVE-2022-21452 CVE-2022-21413 CVE-2022-21462 CVE-2022-21412 
  CVE-2022-21415 CVE-2022-21437 CVE-2022-21438 CVE-2022-21436 CVE-2022-21418 
  CVE-2022-21459 CVE-2022-21478 CVE-2022-21479 CVE-2022-21440 CVE-2022-21425 
  CVE-2022-21457 CVE-2022-21454 CVE-2022-21483 CVE-2022-21482 CVE-2022-21484 
  CVE-2022-21485 CVE-2022-21486 CVE-2022-21489 CVE-2022-21490</changelog>
</package>
<package pkgid="0e691c599e9cf69f680bf03dd9eca05a3ab73431bb651fce7f022471e475ba27" name="mysql" arch="src">
  <version epoch="0" ver="8.0.29" rel="2.oe2203sp1"/>
  <changelog author="zhaoyao &lt;zhaoyao32@huawei.com&gt; - 8.0.24-2" date="1623844800">- Fix buiding error: Built target mysqlgcs error
- Add m4 in BuildRequires</changelog>
  <changelog author="liwu &lt;liwu13@huawei.com&gt; - 8.0.26-1" date="1627905600">- Upgrade mysql to 8.0.26,fix CVES:CVE-2021-2356 CVE-2021-2339 CVE-2021-2354
  CVE-2021-2352 CVE-2021-2340</changelog>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 8.0.27-1" date="1635508800">- Upgrade mysql to 8.0.27,fix CVES:CVE-2021-2471 CVE-2021-2478 CVE-2021-2479
  CVE-2021-2481  CVE-2021-35546 CVE-2021-35575 CVE-2021-35577 CVE-2021-35591
  CVE-2021-35596 CVE-2021-35597 CVE-2021-35602 CVE-2021-35604 CVE-2021-35607
  CVE-2021-35608 CVE-2021-35610 CVE-2021-35612 CVE-2021-35618
  CVE-2021-35621-to-CVE-2021-35636 CVE-2021-35638-to-CVE-2021-35642
  CVE-2021-35644-to-CVE-2021-35648</changelog>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 8.0.28-1" date="1643112000">- Upgrade mysql to 8.0.28 to fix cves.</changelog>
  <changelog author="jintang song&lt;jintang.song@epro.com.cn&gt; - 8.0.29-1" date="1652097600">- Upgrade mysql to 8.0.29,fix CVES:'CVE-2022-21423 CVE-2022-21451 
  CVE-2022-21444 CVE-2022-21460 CVE-2022-21417 CVE-2022-21427 CVE-2022-21414 
  CVE-2022-21435 CVE-2022-21452 CVE-2022-21413 CVE-2022-21462 CVE-2022-21412 
  CVE-2022-21415 CVE-2022-21437 CVE-2022-21438 CVE-2022-21436 CVE-2022-21418 
  CVE-2022-21459 CVE-2022-21478 CVE-2022-21479 CVE-2022-21440 CVE-2022-21425 
  CVE-2022-21457 CVE-2022-21454 CVE-2022-21483 CVE-2022-21482 CVE-2022-21484 
  CVE-2022-21485 CVE-2022-21486 CVE-2022-21489 CVE-2022-21490</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 8.0.29-2" date="1684238400">- Fix CVE-2022-37434</changelog>
</package>
<package pkgid="e37222072e1ecf445ab77ea5ccdf1f2e9801c6f0d6917855f2cca959773c4ab9" name="mysql" arch="src">
  <version epoch="0" ver="8.0.35" rel="1.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 8.0.28-1" date="1643112000">- Upgrade mysql to 8.0.28 to fix cves.</changelog>
  <changelog author="jintang song&lt;jintang.song@epro.com.cn&gt; - 8.0.29-1" date="1652097600">- Upgrade mysql to 8.0.29,fix CVES:'CVE-2022-21423 CVE-2022-21451 
  CVE-2022-21444 CVE-2022-21460 CVE-2022-21417 CVE-2022-21427 CVE-2022-21414 
  CVE-2022-21435 CVE-2022-21452 CVE-2022-21413 CVE-2022-21462 CVE-2022-21412 
  CVE-2022-21415 CVE-2022-21437 CVE-2022-21438 CVE-2022-21436 CVE-2022-21418 
  CVE-2022-21459 CVE-2022-21478 CVE-2022-21479 CVE-2022-21440 CVE-2022-21425 
  CVE-2022-21457 CVE-2022-21454 CVE-2022-21483 CVE-2022-21482 CVE-2022-21484 
  CVE-2022-21485 CVE-2022-21486 CVE-2022-21489 CVE-2022-21490</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 8.0.29-2" date="1666785600">- Add sw64 architecture</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 8.0.29-3" date="1684238400">- Fix CVE-2022-37434</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 8.0.35-1" date="1699358400">- Upgrade to 8.0.35 for fix cves</changelog>
</package>
<package pkgid="592f60bd981fccbaded8c7d943618fbc2c6c92b57a934c1a2254bb7f1028a7f7" name="mysql" arch="src">
  <version epoch="0" ver="8.0.37" rel="1.oe2203sp1"/>
  <changelog author="jintang song&lt;jintang.song@epro.com.cn&gt; - 8.0.29-1" date="1652097600">- Upgrade mysql to 8.0.29,fix CVES:'CVE-2022-21423 CVE-2022-21451 
  CVE-2022-21444 CVE-2022-21460 CVE-2022-21417 CVE-2022-21427 CVE-2022-21414 
  CVE-2022-21435 CVE-2022-21452 CVE-2022-21413 CVE-2022-21462 CVE-2022-21412 
  CVE-2022-21415 CVE-2022-21437 CVE-2022-21438 CVE-2022-21436 CVE-2022-21418 
  CVE-2022-21459 CVE-2022-21478 CVE-2022-21479 CVE-2022-21440 CVE-2022-21425 
  CVE-2022-21457 CVE-2022-21454 CVE-2022-21483 CVE-2022-21482 CVE-2022-21484 
  CVE-2022-21485 CVE-2022-21486 CVE-2022-21489 CVE-2022-21490</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 8.0.29-2" date="1666785600">- Add sw64 architecture</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 8.0.29-3" date="1684238400">- Fix CVE-2022-37434</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 8.0.35-1" date="1699358400">- Upgrade to 8.0.35 for fix cves</changelog>
  <changelog author="Ge Wang &lt;wang__ge@126.com&gt; - 8.0.35-2" date="1702468800">- Remove rpath to fix euler maker build failure</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 8.0.37-1" date="1715083200">- Update to 8.0.37 for fix CVEs(CVE-2024-20964,CVE-2024-20971,CVE-2024-20976,
  CVE-2024-20973,CVE-2024-20978,CVE-2024-20981,CVE-2024-20962,CVE-2024-20977,
  CVE-2024-20963,CVE-2024-20965,CVE-2024-20972,CVE-2024-20961,CVE-2024-20982,
  CVE-2024-20970,CVE-2024-20967,CVE-2024-20984,CVE-2024-20974,CVE-2024-20966,
  CVE-2024-20960,CVE-2024-20985,CVE-2024-20969,CVE-2024-21000,CVE-2024-21069,
  CVE-2024-21009,CVE-2024-21087,CVE-2024-21047,CVE-2024-20998,CVE-2024-21013,
  CVE-2024-21060,CVE-2024-21008,CVE-2024-21102,CVE-2024-21054,CVE-2024-21062,
  CVE-2024-20994,CVE-2024-21096,CVE-2024-21061,CVE-2024-20993,CVE-2024-21055,
  CVE-2024-21057,CVE-2023-6129)</changelog>
</package>
<package pkgid="fc0da74c88413e3b258051eeafc6ef89d6c2f9adc43f4c7433a399f3b1424220" name="mysql" arch="src">
  <version epoch="0" ver="8.0.38" rel="1.oe2203sp1"/>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 8.0.29-2" date="1666785600">- Add sw64 architecture</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 8.0.29-3" date="1684238400">- Fix CVE-2022-37434</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 8.0.35-1" date="1699358400">- Upgrade to 8.0.35 for fix cves</changelog>
  <changelog author="Ge Wang &lt;wang__ge@126.com&gt; - 8.0.35-2" date="1702468800">- Remove rpath to fix euler maker build failure</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 8.0.37-1" date="1715083200">- Update to 8.0.37 for fix CVEs(CVE-2024-20964,CVE-2024-20971,CVE-2024-20976,
  CVE-2024-20973,CVE-2024-20978,CVE-2024-20981,CVE-2024-20962,CVE-2024-20977,
  CVE-2024-20963,CVE-2024-20965,CVE-2024-20972,CVE-2024-20961,CVE-2024-20982,
  CVE-2024-20970,CVE-2024-20967,CVE-2024-20984,CVE-2024-20974,CVE-2024-20966,
  CVE-2024-20960,CVE-2024-20985,CVE-2024-20969,CVE-2024-21000,CVE-2024-21069,
  CVE-2024-21009,CVE-2024-21087,CVE-2024-21047,CVE-2024-20998,CVE-2024-21013,
  CVE-2024-21060,CVE-2024-21008,CVE-2024-21102,CVE-2024-21054,CVE-2024-21062,
  CVE-2024-20994,CVE-2024-21096,CVE-2024-21061,CVE-2024-20993,CVE-2024-21055,
  CVE-2024-21057,CVE-2023-6129)</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 8.0.38-1" date="1721649600">- Update to 8.0.38 for fix CVEs(CVE-2024-21125,CVE-2024-21142,CVE-2024-21179,
  CVE-2024-21171,CVE-2024-21130,CVE-2024-21162,CVE-2024-21177,CVE-2024-20996,
  CVE-2024-21134,CVE-2024-21165,CVE-2024-21173,CVE-2024-21129,CVE-2024-21127,
  CVE-2024-21163)</changelog>
</package>
<package pkgid="f649531c0f5eea8b495b1983ddc2c75e7089a3cfb1d3a22b26737bc2913102f6" name="mysql-connector-java" arch="src">
  <version epoch="1" ver="8.0.30" rel="1.oe2203sp1"/>
  <changelog author="houyingchao &lt;houyingchao@huawei.com&gt; - 1:8.0.16-1" date="1645790400">- Upgrade to 8.0.16
- Fix CVE-2019-2692</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 1:8.0.30-1" date="1695729600">- Upgrade to 8.0.30</changelog>
</package>
<package pkgid="f8652f70f9c864d32c3584a67e73817115cfb697349f868fa7fcff31e395f6ce" name="nano" arch="src">
  <version epoch="0" ver="8.0" rel="1.oe2203sp1"/>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 8.0-1" date="1718625600">- Update to 8.0
  * CVE-2024-5742: Avoid privilege escalations via symlink attacks
    on emergency save file (boo#1226099)
  * By default ^F is bound to starting a forward search, and ^B to
    starting a backward search, while M-F and M-B repeat the search
    in the corresponding direction. (See the documentation if you
    want the old bindings back.)
  * Command-line option --modernbindings (-/) makes ^Q quit, ^X cut,
    ^C copy, ^V paste, ^Z undo, ^Y redo, ^O open a file, ^W write a file,
    ^R replace, ^G find again, ^D find again backwards, ^A set the mark,
    ^T jump to a line, ^P show the position, and ^E execute.
  * For easier access, M-" is bound to placing/removing an anchor,
    and M-' to jumping to the next anchor.</changelog>
</package>
<package pkgid="5283719162ef224ef397ef41b42a727d4dc411dfef195a40a28dbedbc84beea6" name="nasm" arch="src">
  <version epoch="0" ver="2.15.05" rel="5.oe2203sp1"/>
  <changelog author="ExtinctFire &lt;shenyining_00@126.com&gt; - 2.15.05-2" date="1638014400">- enable make check</changelog>
  <changelog author="zhangruifang &lt;zhangruifang1@h-partners.com&gt; - 2.15.05-3" date="1666440000">- add version number for Obsoletes
- fix bogus date in changelog</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@uniontech.com&gt; - 2.15.05-4" date="1674129600">- Fix help info error</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.15.05-5" date="1681300800">- Fix CVE-2022-44370</changelog>
</package>
<package pkgid="5e9f6a60136819b007b99c3215226ed0535408506607c578a02f0817fc65d767" name="nasm" arch="src">
  <version epoch="0" ver="2.15.05" rel="6.oe2203sp1"/>
  <changelog author="ExtinctFire &lt;shenyining_00@126.com&gt; - 2.15.05-2" date="1638014400">- enable make check</changelog>
  <changelog author="zhangruifang &lt;zhangruifang1@h-partners.com&gt; - 2.15.05-3" date="1666440000">- add version number for Obsoletes
- fix bogus date in changelog</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@uniontech.com&gt; - 2.15.05-4" date="1674129600">- Fix help info error</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.15.05-5" date="1681300800">- Fix CVE-2022-44370</changelog>
  <changelog author="hongjinghao &lt;hongjinghao@huawei.com&gt; - 2.15.05-6" date="1692792000">- Fix CVE-2020-21528</changelog>
</package>
<package pkgid="d464b609a7d9c40b806b2e23576d43497fcde869d719340cc4fdc556d819bc28" name="nautilus" arch="src">
  <version epoch="0" ver="3.38.2" rel="2.oe2203sp1"/>
  <changelog author="technology208 &lt;technology@208suo.com&gt;  - 3.38.2-2" date="1716206400">Fix crash when copying an invalid file</changelog>
</package>
<package pkgid="f7add51a7901db9eff9f1a22940dfb0897d3788f95c21dbae50b711ca4b413f9" name="ncurses" arch="src">
  <version epoch="0" ver="6.3" rel="10.oe2203sp1"/>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 6.3-1" date="1645272000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:update to 6.3</changelog>
  <changelog author="xihaochen &lt;xihaochen@h-partners.com&gt; - 6.3-2" date="1648209600">- Type:requirements
- CVE:NA
- SUG:NA
- DESC:split compat-libs from ncurses</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 6.3-3" date="1651147200">- Type:CVE
- CVE:CVE-2022-29458
- SUG:NA
- DESC:fix CVE-2022-29458</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 6.3-4" date="1655380800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:delete marcos in changelog</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 6.3-5" date="1668081600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:split static from ncurses-devel</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 6.3-6" date="1677585600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add options for cross build</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 6.3-7" date="1688385600">- Type:CVE
- CVE:CVE-2023-29491
- SUG:NA
- DESC:fix CVE-2023-29491</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 6.3-8" date="1688472000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fixes for out-of-memory condition</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 6.3-9" date="1702641600">- Type:CVE
- CVE:CVE-2023-50495
- SUG:NA
- DESC:fix CVE-2023-50495</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 6.3-10" date="1706616000">- Type:CVE
- CVE:CVE-2023-45918
- SUG:NA
- DESC:fix CVE-2023-45918</changelog>
</package>
<package pkgid="6f9b7b619172006bbc807d7197b33d6fb12b7c932958086973ba2577d6d66c1c" name="ncurses" arch="src">
  <version epoch="0" ver="6.3" rel="8.oe2203sp1"/>
  <changelog author="zhuyan &lt;zhuyan34@huawei.com&gt; - 6.2-2" date="1632398400">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:correct the source of ncurses</changelog>
  <changelog author="xihaochen&lt;xihaochen@huawei.com&gt; - 6.2-3" date="1634040000">- Type:CVE
- CVE:CVE-2021-39537
- SUG:NA
- DESC:fix CVE-2021-39537</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 6.3-1" date="1645272000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:update to 6.3</changelog>
  <changelog author="xihaochen &lt;xihaochen@h-partners.com&gt; - 6.3-2" date="1648209600">- Type:requirements
- CVE:NA
- SUG:NA
- DESC:split compat-libs from ncurses</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 6.3-3" date="1651147200">- Type:CVE
- CVE:CVE-2022-29458
- SUG:NA
- DESC:fix CVE-2022-29458</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 6.3-4" date="1655380800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:delete marcos in changelog</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 6.3-5" date="1668081600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:split static from ncurses-devel</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 6.3-6" date="1677585600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add options for cross build</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 6.3-7" date="1688385600">- Type:CVE
- CVE:CVE-2023-29491
- SUG:NA
- DESC:fix CVE-2023-29491</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 6.3-8" date="1688472000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fixes for out-of-memory condition</changelog>
</package>
<package pkgid="cae11359ff1b0664b0ea29d0b8ceb692139396f58037f158b002ee2f3acbab8b" name="ncurses" arch="src">
  <version epoch="0" ver="6.3" rel="9.oe2203sp1"/>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 6.3-1" date="1645272000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:update to 6.3</changelog>
  <changelog author="xihaochen &lt;xihaochen@h-partners.com&gt; - 6.3-2" date="1648209600">- Type:requirements
- CVE:NA
- SUG:NA
- DESC:split compat-libs from ncurses</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 6.3-3" date="1651147200">- Type:CVE
- CVE:CVE-2022-29458
- SUG:NA
- DESC:fix CVE-2022-29458</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 6.3-4" date="1655380800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:delete marcos in changelog</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 6.3-5" date="1668081600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:split static from ncurses-devel</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 6.3-6" date="1677585600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add options for cross build</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 6.3-7" date="1688385600">- Type:CVE
- CVE:CVE-2023-29491
- SUG:NA
- DESC:fix CVE-2023-29491</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 6.3-8" date="1688472000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fixes for out-of-memory condition</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 6.3-9" date="1702641600">- Type:CVE
- CVE:CVE-2023-50495
- SUG:NA
- DESC:fix CVE-2023-50495</changelog>
</package>
<package pkgid="e67b2aa67968ef52de7aaafdcf9f48d117b7cd96ec60269b685e2e923d8867e9" name="net-snmp" arch="src">
  <version epoch="1" ver="5.9.1" rel="5.oe2203sp1"/>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 5.8-15" date="1631880000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix undefined behavior in asn_build_int()
       libsnmp: Rework parse_imports()
       libsnmp: Increase MAX_IMPORTS
       libsnmp: Allocate the module import list on the heap
       libsnmp: Fix a memory leak in a MIB parser error path
       libsnmp: Fix the getoid() error path</changelog>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 5.9.1-1" date="1639656000">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:update net-snmp to 5.9.1</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1:5.9.1-2" date="1659960000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix build error which occasionally happened</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1:5.9.1-3" date="1661601600">- Type:CVE
- CVE:CVE-2022-24805 CVE-2022-24806 CVE-2022-24807 CVE-2022-24808 CVE-2022-24809 CVE-2022-24810
- SUG:NA
- DESC:fix CVE-2022-24805 CVE-2022-24806 CVE-2022-24807
           CVE-2022-24808 CVE-2022-24809 CVE-2022-24810</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 1:5.9.1-4" date="1664539200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: IF-MIB, IP-FORWARD-MIB: Improve robustness
        IF-MIB: pass the network interface index to net
        IF-MIB: fix a memory leak
        IF-MIB: fix a recently introduced use after free
        IF-MIB: add a trailing newline to an error message</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1:5.9.1-5" date="1672401600">- Type:CVE
- CVE:CVE-2022-44792 CVE-2022-44793
- SUG:NA
- DESC:fix CVE-2022-44792 CVE-2022-44793</changelog>
</package>
<package pkgid="3e021c51192e6b22784d7218375735f853e2b3cf6efca4c2ae971ad1ec76d81e" name="netty" arch="src">
  <version epoch="0" ver="4.1.13" rel="21.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 4.1.13-16" date="1639742400">- Fix CVE-2021-43797</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 4.1.13-17" date="1640347200">- This package depends on log4j.After the log4j vulnerability CVE-2021-45105 is fixed,the version needs to be rebuild.</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 4.1.13-18" date="1646654400">- Remove lz4-java dependency</changelog>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt;  - 4.1.13-19" date="1667995200">- Change source</changelog>
  <changelog author="wulei &lt;wulei80@h-partners.com&gt; - 4.1.13-20" date="1678017600">- Add strip</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 4.1.13-21" date="1702468800">- Fix CVE-2022-41881</changelog>
</package>
<package pkgid="e536ea6466759059a7b5a88453da21fd397c554a7628125142fc752eb2c7ad2e" name="netty3" arch="src">
  <version epoch="0" ver="3.10.6" rel="8.oe2203sp1"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.10.6-8" date="1724846400">- Fix CVE-2019-16869,CVE-2019-20444,CVE-2019-20445</changelog>
</package>
<package pkgid="e23abe3bf878f816598c0415d6d39569c9442f327b5cfda3f009c6d1488a6056" name="newt" arch="src">
  <version epoch="0" ver="0.52.21" rel="9.oe2203sp1"/>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 0.52.21-6" date="1651147200">- Type:requirement
- Id:NA
- SUG:NA
- DESC:rebuild package</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 0.52.21-7" date="1666267200">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:fix warnings about never-read values</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 0.52.21-8" date="1675771200">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:delete a static library file</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 0.52.21-9" date="1676030400">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:add BuildRequires make to fix build problem</changelog>
</package>
<package pkgid="68ae95c9aa39dc0f1160c519b6c7f37954501379281e7ac655d9196394e1f221" name="nftables" arch="src">
  <version epoch="1" ver="1.0.0" rel="11.oe2203sp1"/>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 1:1.0.0-2" date="1662206400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix cache prepare nft_cache evaluate to return error
       fix cache validate handle string length
       add src support for implicit chain bindings
       fix cache release pending rules
       fix segtree map listing
       parser_json fix device parsing in netdev family
       fix src Don't parse string as verdict in map</changelog>
  <changelog author="huangyu &lt;huangyu106@huawei.com&gt; - 1:1.0.0-3" date="1664539200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix nft desribe ip option rr value coredump</changelog>
  <changelog author="huangyu &lt;huangyu106@huawei.com&gt; - 1:1.0.0-4" date="1670932800">- Type:feature
- ID:NA
- SUG:NA
- DESC:enabled DT test</changelog>
  <changelog author="huangyu &lt;huangyu106@huawei.com&gt; - 1:1.0.0-5" date="1670932801">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix string prefix expression must retain original length
fix release top level scope</changelog>
  <changelog author="huangyu &lt;huangyu106@huawei.com&gt; - 1:1.0.0-6" date="1671105600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix dump locations expressions only if set</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 1:1.0.0-7" date="1679400000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:evaluate allow implicit ether vlan dep
evaluate datatype memleak after binop transfer
evaluate bogus datatype assertion in binary operation evaluation
netlink delinearize do not transfer binary operation to non anonymous sets
payload do not kill dependency for proto unknown
monitor missing cache and set handle initialization
netlink linearize fix timeout with map updates</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 1:1.0.0-8" date="1680782400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix potential array out of bounds access
evaluate: fix shift exponent underflow in concatenation evaluation
netlink: Fix for potential NULL-pointer deref
mnl: dump_nf_hooks() leaks memory in error path</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 1:1.0.0-9" date="1692014400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:netlink_linearize: use div_round_up in byteorder length</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1:1.0.0-11" date="1719403200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport upstream patches
       evaluate: error out if basetypes are different
       evaluate: guard against NULL basetype
       evaluate: handle invalid mapping expressions gracefully
       evaluate: reject attempt to update a set
       evaluate: release mpz type in expr_evaluate_list() error path
       expression: missing line in describe command with invalid expression

Thu Apr 18 2024 lingsheng &lt;lingsheng1@h-partners.com&gt; - 1:1.0.0-10
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:datatype: don't return a const string from cgroupv2_get_path()
datatype: fix leak and cleanup reference counting for struct datatype
datatype: initialize TYPE_CT_EVENTBIT slot in datatype array
datatype: initialize TYPE_CT_LABEL slot in datatype array
evaluate: do not remove anonymous set with protocol flags and single element
evaluate: don't crash if object map does not refer to a value
evaluate: error out when expression has no datatype
evaluate: error out when store needs more than one 128bit register of align fixup
evaluate: fix check for truncation in stmt_evaluate_log_prefix()
evaluate: fix double free on dtype release
evaluate: fix memleak in prefix evaluation with wildcard interface name
evaluate: reject set in concatenation
evaluate: revisit anonymous set with single element optimization
evaluate: skip anonymous set optimization for concatenations
evaluate: stmt_nat: set reference must point to a map
evaluate: tproxy: move range error checks after arg evaluation
evaluate: validate chain max length
evaluate: validate maximum log statement prefix length
exthdr: fix tcpopt_find_template to use length after mask adjustment
exthdr: prefer raw_type instead of desc-&gt;type
json: expose dynamic flag
json: fix use after free in table_flags_json()
libnftables: Drop cache in -c/--check mode
meta: fix tc classid parsing out-of-bounds access
netlink: don't crash if prefix for &lt; byte is requested
netlink: fix leaking typeof_expr_data/typeof_expr_key in netlink_delinearize_set()
netlink: handle invalid etype in set_make_key()
parser_bison: fix ct scope underflow if ct helper section is duplicated
parser_bison: fix memleak in meta set error handling
parser_bison: make sure obj_free releases timeout policies
parser_json: Catch nonsense ops in match statement
parser_json: Default meter size to zero
parser_json: Fix flowtable prio value parsing
parser_json: Fix synproxy object mss/wscale parsing
parser_json: Fix typo in json_parse_cmd_add_object()
parser_json: Proper ct expectation attribute parsing
parser_json: Wrong check in json_parse_ct_timeout_policy()
py: fix exception during cleanup of half-initialized Nftables
rule: fix sym refcount assertion</changelog>
</package>
<package pkgid="6eeb065c481e2a69a670b10adfe9bb391fb2635e9e8639bf334e12a769346420" name="nghttp2" arch="src">
  <version epoch="0" ver="1.46.0" rel="3.oe2203sp1"/>
  <changelog author="yanglu &lt;yanglu72@huawei.com&gt; - 1.46.0-1" date="1638792000">- Type:requirements
- Id:NA
- SUG:NA
- DESC:update nghttp2 to 1.46.0</changelog>
  <changelog author="seuzw &lt;930zhaowei@163.com&gt; - 1.46.0-2" date="1661169600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:replace the use of strtoul and strol with parse_uint</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.46.0-3" date="1677585600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete *.a file</changelog>
</package>
<package pkgid="8a46c66168b54ddd49be160a827bee413532c6ba39b6a7465466b94207cf7624" name="nghttp2" arch="src">
  <version epoch="0" ver="1.46.0" rel="4.oe2203sp1"/>
  <changelog author="yanglu &lt;yanglu72@huawei.com&gt; - 1.46.0-1" date="1638792000">- Type:requirements
- Id:NA
- SUG:NA
- DESC:update nghttp2 to 1.46.0</changelog>
  <changelog author="seuzw &lt;930zhaowei@163.com&gt; - 1.46.0-2" date="1661169600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:replace the use of strtoul and strol with parse_uint</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.46.0-3" date="1677585600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete *.a file</changelog>
  <changelog author="wangye &lt;wangye91@h-partners.com&gt; - 1.46.0-4" date="1689422400">- Type:cve
- ID:CVE-2023-35945
- SUG:NA
- DESC:fix CVE-2023-35945</changelog>
</package>
<package pkgid="da91ef4285ea18bb4bdc950fd1fdc4e9bea040f556aad6f10264cf4a25af03b7" name="nghttp2" arch="src">
  <version epoch="0" ver="1.46.0" rel="5.oe2203sp1"/>
  <changelog author="yanglu &lt;yanglu72@huawei.com&gt; - 1.46.0-1" date="1638792000">- Type:requirements
- Id:NA
- SUG:NA
- DESC:update nghttp2 to 1.46.0</changelog>
  <changelog author="seuzw &lt;930zhaowei@163.com&gt; - 1.46.0-2" date="1661169600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:replace the use of strtoul and strol with parse_uint</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.46.0-3" date="1677585600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete *.a file</changelog>
  <changelog author="wangye &lt;wangye91@h-partners.com&gt; - 1.46.0-4" date="1689422400">- Type:cve
- ID:CVE-2023-35945
- SUG:NA
- DESC:fix CVE-2023-35945</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 1.46.0-5" date="1697716800">- Type:CVE
- ID:CVE-2023-44487
- SUG:NA
- DESC:fix CVE-2023-44487 and build error</changelog>
</package>
<package pkgid="0fe34b142dd92713bd235a93640ebedf3ea7f670ad7e21f2ce9426dc7f6db9f0" name="nghttp2" arch="src">
  <version epoch="0" ver="1.46.0" rel="6.oe2203sp1"/>
  <changelog author="seuzw &lt;930zhaowei@163.com&gt; - 1.46.0-2" date="1661169600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:replace the use of strtoul and strol with parse_uint</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.46.0-3" date="1677585600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete *.a file</changelog>
  <changelog author="wangye &lt;wangye91@h-partners.com&gt; - 1.46.0-4" date="1689422400">- Type:cve
- ID:CVE-2023-35945
- SUG:NA
- DESC:fix CVE-2023-35945</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 1.46.0-5" date="1697716800">- Type:CVE
- ID:CVE-2023-44487
- SUG:NA
- DESC:fix CVE-2023-44487 and build error</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 1.46.0-6" date="1712491200">- Type:CVE
- ID:CVE-2024-28182
- SUG:restart
- DESC:fix CVE-2024-28182</changelog>
</package>
<package pkgid="f93925cd4ce6cdebc27183612d53e3143dd9f7df80ba0478117d88ef489a07d5" name="nginx" arch="src">
  <version epoch="1" ver="1.21.5" rel="6.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 1:1.21.5-1" date="1642248000">- Upgrade nginx to 1.21.5</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1:1.21.5-2" date="1658232000">- switch pcre to pcre2</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1:1.21.5-3" date="1666785600">- fix CVE-2022-41742 CVE-2022-41741</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 1:1.21.5-4" date="1669291200">- add package mod-devel</changelog>
  <changelog author="snoweay &lt;snoweay@163.com&gt; - 1:1.21.5-5" date="1671624000">- add safety compile options</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 1:1.21.5-6" date="1697716800">- fix CVE-2023-44487</changelog>
</package>
<package pkgid="511fd47a42e11cbf9b9f2a3d0cef464c570153613695f8c83dec6775b31c5dd5" name="nginx" arch="src">
  <version epoch="1" ver="1.21.5" rel="7.oe2203sp1"/>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1:1.21.5-3" date="1666785600">- fix CVE-2022-41742 CVE-2022-41741</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 1:1.21.5-4" date="1669291200">- add package mod-devel</changelog>
  <changelog author="snoweay &lt;snoweay@163.com&gt; - 1:1.21.5-5" date="1671624000">- add safety compile options</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 1:1.21.5-6" date="1697716800">- fix CVE-2023-44487</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:1.21.5-7" date="1723723200">- fix CVE-2024-7347</changelog>
</package>
<package pkgid="2ad15947b23fd49811ab62410af569d691adacc0694681a8cb028f26652d216a" name="nmap" arch="src">
  <version epoch="2" ver="7.92" rel="6.oe2203sp1"/>
  <changelog author="quanhongfei &lt;quanhongfei@huawei.com&gt; - 2:7.92-1" date="1639051200">- Type:requirement
- ID:NA
- SUG:NA
- DESC:update nmap to 7.92</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2:7.92-2" date="1644321600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix nc command permission error</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 2:7.92-3" date="1655467200">- Type:bugfix
- CVE:
- SUG:NA
- DESC:replace sensitive words</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 2:7.92-4" date="1685361600">- Type:bugfix
- CVE:
- SUG:NA
- DESC:decouple from PCRE because it has been End-of-life, use local libpcre to build instead</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 2:7.92-5" date="1688644800">- Type:bugfix
- CVE:
- SUG:NA
- DESC:add pcre2 support</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 2:7.92-6" date="1692792000">- Type:bugfix
- CVE:
- SUG:NA
- DESC:nping:fix out of bounds</changelog>
</package>
<package pkgid="911e96ba78178ac24a5fde2cd54f44a6426856d6254b6c70e3b674e615199b2d" name="nmap" arch="src">
  <version epoch="2" ver="7.92" rel="8.oe2203sp1"/>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2:7.92-2" date="1644321600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix nc command permission error</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 2:7.92-3" date="1655467200">- Type:bugfix
- CVE:
- SUG:NA
- DESC:replace sensitive words</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 2:7.92-4" date="1685361600">- Type:bugfix
- CVE:
- SUG:NA
- DESC:decouple from PCRE because it has been End-of-life, use local libpcre to build instead</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 2:7.92-5" date="1688644800">- Type:bugfix
- CVE:
- SUG:NA
- DESC:add pcre2 support</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 2:7.92-6" date="1692792000">- Type:bugfix
- CVE:
- SUG:NA
- DESC:nping:fix out of bounds</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 2:7.92-7" date="1694779200">- Type:bugfix
- CVE:
- SUG:NA
- DESC:enable dt check</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 2:7.92-8" date="1705406400">- Type:bugfix
- CVE:
- SUG:NA
- DESC:remove password printing</changelog>
</package>
<package pkgid="07e3eef74dbcd0d847b9ac2f8c6c1f4a3be171a5e646c899a9614d1cb4a60953" name="nodejs" arch="src">
  <version epoch="1" ver="12.22.11" rel="10.oe2203sp1"/>
  <changelog author="liyuxiang &lt;liyuxiang@ncti-gba.cn&gt; - 1:12.22.11-2" date="1668600000">- fix CVE-2022-43548</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:12.22.11-3" date="1670846400">- Synchronize the release of 22.03-LTS</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:12.22.11-4" date="1677067200">- Fix CVE-2023-0286,CVE-2023-0215,CVE-2022-4304 and CVE-2022-4450</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:12.22.11-5" date="1693310400">- Fix CVE-2022-32212,CVE-2022-32213,CVE-2022-32214,CVE-2022-32215,
- CVE-2022-25881,CVE-2023-23918,CVE-2023-23920,CVE-2023-30589,
- CVE-2023-30590,CVE-2023-30581,CVE-2023-32002,CVE-2023-32006,
- CVE-2023-32559,CVE-2022-35256</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:12.22.11-6" date="1698321600">- Update CVE-2023-23918.patch for fix nodejs-raw-body,nodejs-istanbul build error</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt;- 1:12.22.11-7" date="1707134400">- add loong64 support</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt;- 1:12.22.11-8" date="1707134401">- Fix CVE-2023-0464 and CVE-2023-0465</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt;- 1:12.22.11-9" date="1707220800">- Fix CVE-2023-44487</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt;- 1:12.22.11-10" date="1726747200">- Fix CVE-2023-46809,CVE-2024-22019,CVE-2024-22025,CVE-2024-27982 and CVE-2024-27983</changelog>
</package>
<package pkgid="0ee20ce93c21f8e23ff995dc67c2308a2c710994ca02594fd9cf89e7b63e15e1" name="nodejs" arch="src">
  <version epoch="1" ver="12.22.11" rel="4.oe2203sp1"/>
  <changelog author="xinghe &lt;xinghe1@huawei.com&gt; - 1:12.18.4-4" date="1615809600">- fix CVE-2021-22883 CVE-2021-22884</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@huawei.com&gt; - 1:12.18.4-5" date="1626782400">- fix CVE-2021-22918</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@huawei.com&gt; - 1:12.18.4-6" date="1629115200">- use getauxval to fix build failure in node_main.cc</changelog>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 1:12.18.4-7" date="1634817600">- fix CVE-2021-22930</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 1:12.22.11-1" date="1648468800">- Update to 12.22.11, fix some cves.</changelog>
  <changelog author="liyuxiang &lt;liyuxiang@ncti-gba.cn&gt; - 1:12.22.11-2" date="1668600000">- fix CVE-2022-43548</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:12.22.11-3" date="1670846400">- Synchronize the release of 22.03-LTS</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:12.22.11-4" date="1677067200">- Fix CVE-2023-0286,CVE-2023-0215,CVE-2022-4304 and CVE-2022-4450</changelog>
</package>
<package pkgid="004df86c96ed7207a5fb52d97341cb84d13b4eda53f25eba7b398864814a3b2e" name="nodejs" arch="src">
  <version epoch="1" ver="12.22.11" rel="5.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 1:12.18.4-7" date="1634817600">- fix CVE-2021-22930</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 1:12.22.11-1" date="1648468800">- Update to 12.22.11, fix some cves.</changelog>
  <changelog author="liyuxiang &lt;liyuxiang@ncti-gba.cn&gt; - 1:12.22.11-2" date="1668600000">- fix CVE-2022-43548</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:12.22.11-3" date="1670846400">- Synchronize the release of 22.03-LTS</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:12.22.11-4" date="1677067200">- Fix CVE-2023-0286,CVE-2023-0215,CVE-2022-4304 and CVE-2022-4450</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:12.22.11-5" date="1693310400">- Fix CVE-2022-32212,CVE-2022-32213,CVE-2022-32214,CVE-2022-32215,
- CVE-2022-25881,CVE-2023-23918,CVE-2023-23920,CVE-2023-30589,
- CVE-2023-30590,CVE-2023-30581,CVE-2023-32002,CVE-2023-32006,
- CVE-2023-32559,CVE-2022-35256</changelog>
</package>
<package pkgid="4c09739f4214e883c9d3c8d5e88ad8ea4a3f1a8353c1ecca12d4073eb803a134" name="nodejs" arch="src">
  <version epoch="1" ver="12.22.11" rel="6.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 1:12.22.11-1" date="1648468800">- Update to 12.22.11, fix some cves.</changelog>
  <changelog author="liyuxiang &lt;liyuxiang@ncti-gba.cn&gt; - 1:12.22.11-2" date="1668600000">- fix CVE-2022-43548</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:12.22.11-3" date="1670846400">- Synchronize the release of 22.03-LTS</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:12.22.11-4" date="1677067200">- Fix CVE-2023-0286,CVE-2023-0215,CVE-2022-4304 and CVE-2022-4450</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:12.22.11-5" date="1693310400">- Fix CVE-2022-32212,CVE-2022-32213,CVE-2022-32214,CVE-2022-32215,
- CVE-2022-25881,CVE-2023-23918,CVE-2023-23920,CVE-2023-30589,
- CVE-2023-30590,CVE-2023-30581,CVE-2023-32002,CVE-2023-32006,
- CVE-2023-32559,CVE-2022-35256</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:12.22.11-6" date="1698321600">- Update CVE-2023-23918.patch for fix nodejs-raw-body,nodejs-istanbul build error</changelog>
</package>
<package pkgid="fc4671262a4a668c73b2a9dfdb96a4b6560f4456286cba7c59f313bbb1ed1e29" name="nodejs" arch="src">
  <version epoch="1" ver="12.22.11" rel="9.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 1:12.22.11-1" date="1648468800">- Update to 12.22.11, fix some cves.</changelog>
  <changelog author="liyuxiang &lt;liyuxiang@ncti-gba.cn&gt; - 1:12.22.11-2" date="1668600000">- fix CVE-2022-43548</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:12.22.11-3" date="1670846400">- Synchronize the release of 22.03-LTS</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:12.22.11-4" date="1677067200">- Fix CVE-2023-0286,CVE-2023-0215,CVE-2022-4304 and CVE-2022-4450</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:12.22.11-5" date="1693310400">- Fix CVE-2022-32212,CVE-2022-32213,CVE-2022-32214,CVE-2022-32215,
- CVE-2022-25881,CVE-2023-23918,CVE-2023-23920,CVE-2023-30589,
- CVE-2023-30590,CVE-2023-30581,CVE-2023-32002,CVE-2023-32006,
- CVE-2023-32559,CVE-2022-35256</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:12.22.11-6" date="1698321600">- Update CVE-2023-23918.patch for fix nodejs-raw-body,nodejs-istanbul build error</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt;- 1:12.22.11-7" date="1707134400">- add loong64 support</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt;- 1:12.22.11-8" date="1707134401">- Fix CVE-2023-0464 and CVE-2023-0465</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt;- 1:12.22.11-9" date="1707220800">- Fix CVE-2023-44487</changelog>
</package>
<package pkgid="7946afa024d0f1b627dfd81d868410808d35645d5563a3c372bc4ffa669c5bc4" name="nodejs-hawk" arch="src">
  <version epoch="0" ver="9.0.1" rel="2.oe2203sp1"/>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 4.1.2-2" date="1652788800">- Fix CVE-2022-29167</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 9.0.1-1" date="1666612800">- Upgrade to 9.0.1</changelog>
  <changelog author="chenchen &lt;chen_aka_jan@163.com&gt; - 9.0.1-2" date="1685620800">- remove unused hapi dependencies</changelog>
</package>
<package pkgid="dbfe7a4f3eda3941575cb3ff095172e801406713d04d2a8f29fd49873717d332" name="nodejs-qs" arch="src">
  <version epoch="0" ver="6.5.1" rel="2.oe2203sp1"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 6.5.1-2" date="1711454400">- Fix CVE-2022-24999</changelog>
</package>
<package pkgid="88ddfb213cdb9a7b193f6136c0556884c2f725fd7d10a771c2b8d7be822af964" name="nodejs-tiny-lr-fork" arch="src">
  <version epoch="0" ver="0.0.5" rel="3.oe2203sp1"/>
  <changelog author="chenchen &lt;chen_aka_jan@163.com&gt; - 0.0.5-2" date="1656763200">- Updating debug version</changelog>
  <changelog author="chenchen &lt;chen_aka_jan@163.com&gt; - 0.0.5-3" date="1685620800">- add requires request for update-livereload error</changelog>
</package>
<package pkgid="217fef5aac293c939956769528bd8fc29d355b24dbdbb3eae5d39c518748f679" name="nodejs-tough-cookie" arch="src">
  <version epoch="0" ver="2.3.2" rel="3.oe2203sp1"/>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.3.2-3" date="1702382400">- Fix CVE-2023-26136</changelog>
</package>
<package pkgid="1ba9338e5c3c635e92b79cb4f1997786153acf6d54c14542113b532b5d064a72" name="nspr" arch="src">
  <version epoch="0" ver="4.32.0" rel="5.oe2203sp1"/>
  <changelog author="chenyanpanHW &lt;chenyanpan@huawei.com&gt; - 4.29.0-2" date="1627646400">- DESC: delete -Sgit from 
%setup       -q



/usr/bin/cat /home/lkp/rpmbuild/SOURCES/nspr-gcc-atomics.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

, and delete BuildRequires git</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@huawei.com&gt; - 4.32.0-1" date="1638187200">- update to 4.32.0</changelog>
  <changelog author="Wenyu Liu &lt;liuwenyu7@huawei.com&gt; - 4.32.0-2" date="1666699200">- rebuild package</changelog>
  <changelog author="zhaozhen &lt;zhaozhen@loongson.cn&gt; - 4.32.0-3" date="1668427200">- Support loongarch64</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 4.32.0-4" date="1669204800">- Add sw64 architecture</changelog>
  <changelog author="Wenyu Liu&lt;liuwenyu7@huawei.com&gt; - 4.32.0-5" date="1677240000">- disable debug option</changelog>
</package>
<package pkgid="99fa50b8d129e6a7fab394c649d2ed06a6b71156809cf3c2bc5e13d1e85b87e3" name="nss" arch="src">
  <version epoch="0" ver="3.72.0" rel="7.oe2203sp1"/>
  <changelog author="yuanxin &lt;yuanxin24@huawei.com&gt; - 3.54-10" date="1627041600">- remove BuildRequires gdb</changelog>
  <changelog author="liudabo &lt;liudabo1@huawei.com&gt; - 3.72.0-1" date="1638187200">- upgrade version to 3.72</changelog>
  <changelog author="shangyibin &lt;shangyibin1@huawei.com&gt; - 3.72.0-2" date="1640692800">- fix CVE-2021-43527</changelog>
  <changelog author="renhongxun &lt;renhongxun@h-partners.com&gt; - 3.72.0-3" date="1659614400">- remove nss-help from Requires of nss and nss-util</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 3.72.0-4" date="1666872000">- optimize support for sm2,sm3</changelog>
  <changelog author="zhouchenchen &lt;zhouchenchen@huawei.com&gt; - 3.72.0-5" date="1669204800">- update source0 url</changelog>
  <changelog author="jinlun &lt;jinlun@huawei.com&gt; - 3.72.0-6" date="1681819200">- Add SECMOD_LockedModuleHasRemovableSlots and update version</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.72.0-7" date="1683806400">- Update pkgconfig(nss) pkgconfig(nss-softokn) to version 3.72</changelog>
</package>
<package pkgid="5321fecc1be749467da08f84bbc9bb559a484d52e0ef0734120bcbc489532447" name="nss" arch="src">
  <version epoch="0" ver="3.72.0" rel="9.oe2203sp1"/>
  <changelog author="yuanxin &lt;yuanxin24@huawei.com&gt; - 3.54-10" date="1627041600">- remove BuildRequires gdb</changelog>
  <changelog author="liudabo &lt;liudabo1@huawei.com&gt; - 3.72.0-1" date="1638187200">- upgrade version to 3.72</changelog>
  <changelog author="shangyibin &lt;shangyibin1@huawei.com&gt; - 3.72.0-2" date="1640692800">- fix CVE-2021-43527</changelog>
  <changelog author="renhongxun &lt;renhongxun@h-partners.com&gt; - 3.72.0-3" date="1659614400">- remove nss-help from Requires of nss and nss-util</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 3.72.0-4" date="1666872000">- optimize support for sm2,sm3</changelog>
  <changelog author="zhouchenchen &lt;zhouchenchen@huawei.com&gt; - 3.72.0-5" date="1669204800">- update source0 url</changelog>
  <changelog author="jinlun &lt;jinlun@huawei.com&gt; - 3.72.0-6" date="1681819200">- Add SECMOD_LockedModuleHasRemovableSlots and update version</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.72.0-7" date="1683806400">- Update pkgconfig(nss) pkgconfig(nss-softokn) to version 3.72</changelog>
  <changelog author="jinlun &lt;jinlun@huawei.com&gt; - 3.72.0-8" date="1685361600">- Fix build failed.</changelog>
  <changelog author="jinlun &lt;jinlun@huawei.com&gt; - 3.72.0-9" date="1685966400">- Add Integrity Verification File in nss-softokn.</changelog>
</package>
<package pkgid="5e405fdff1e05fa79fa193c6f97f38ea08c1499a22b2026581d9fde3f88bd459" name="ntfs-3g" arch="src">
  <version epoch="2" ver="2022.5.17" rel="3.oe2203sp1"/>
  <changelog author="liyuxiang&lt;liyuxiang@ncti-gba.cn&gt; - 2:2022.5.17-2" date="1668081600">- fix CVE-2022-40284</changelog>
  <changelog author="qiaojijun&lt;qiaojijun@kylinos.cn&gt; - 2:2022.5.17-3" date="1718625600">- fix CVE-2023-52890</changelog>
</package>
<package pkgid="878f310507845cf7449ffc40e54224009b102b55c20672d3c395d3122f0c886d" name="ntp" arch="src">
  <version epoch="0" ver="4.2.8p15" rel="10.oe2203sp1"/>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 4.2.8p15-3" date="1627646400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: fix multiple defination with gcc 10</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 4.2.8p15-4" date="1628596800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: do not use PTHREAD_STACK_MIN on glibc</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 4.2.8p15-5" date="1639051200">- Type:requirement
- ID:NA
- SUG:NA
- DESC:add ntp-help dependency for ntp</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 4.2.8p15-6" date="1666094400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix-MD5-manpage</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 4.2.8p15-7" date="1669291200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:run the bootstrap script to prevent build failures</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 4.2.8p15-8" date="1683806400">- Type:CVE
- ID:CVE-2023-26551
- SUG:NA
- DESC:make sure the buffer has enough room for the input extra characters</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 4.2.8p15-9" date="1683892800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:change the name of CVE-2023-26551</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 4.2.8p15-10" date="1684929600">- Type:CVE
- ID:CVE-2023-26551,CVE-2023-26552,CVE-2023-26553,CVE-2023-26554,CVE-2023-26555
- SUG:NA
- DESC:change the patch of CVE-2023-26551 and fix CVE-2023-26555</changelog>
</package>
<package pkgid="50161a917d86a4795a26ef1648a4cdf5abec334c0d8cc1acf0d7b9c671cc71f5" name="ntp" arch="src">
  <version epoch="0" ver="4.2.8p15" rel="13.oe2203sp1"/>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 4.2.8p15-5" date="1639051200">- Type:requirement
- ID:NA
- SUG:NA
- DESC:add ntp-help dependency for ntp</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 4.2.8p15-6" date="1666094400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix-MD5-manpage</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 4.2.8p15-7" date="1669291200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:run the bootstrap script to prevent build failures</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 4.2.8p15-8" date="1683806400">- Type:CVE
- ID:CVE-2023-26551
- SUG:NA
- DESC:make sure the buffer has enough room for the input extra characters</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 4.2.8p15-9" date="1683892800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:change the name of CVE-2023-26551</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 4.2.8p15-10" date="1684929600">- Type:CVE
- ID:CVE-2023-26551,CVE-2023-26552,CVE-2023-26553,CVE-2023-26554,CVE-2023-26555
- SUG:NA
- DESC:change the patch of CVE-2023-26551 and fix CVE-2023-26555</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 4.2.8p15-11" date="1687348800">- Type:bugfix
- ID:
- SUG:NA
- DESC:add NULL pointer check when ntpd deletes the last interface</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 4.2.8p15-12" date="1689163200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add Restart and conflilct service in ntpd.service</changelog>
  <changelog author="chengyechun &lt;chengyehcun1@huawei.com&gt; - 4.2.8p15-13" date="1700827200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:update ntpd.service</changelog>
</package>
<package pkgid="25b6c65071bbfb2e7ff5842df4fa4cf9b29ada57f35843f9b22de64165f24350" name="ntp" arch="src">
  <version epoch="0" ver="4.2.8p15" rel="9.oe2203sp1"/>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 4.2.8p15-3" date="1627646400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: fix multiple defination with gcc 10</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 4.2.8p15-4" date="1628596800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: do not use PTHREAD_STACK_MIN on glibc</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 4.2.8p15-5" date="1639051200">- Type:requirement
- ID:NA
- SUG:NA
- DESC:add ntp-help dependency for ntp</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 4.2.8p15-6" date="1666094400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix-MD5-manpage</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 4.2.8p15-7" date="1669291200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:run the bootstrap script to prevent build failures</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 4.2.8p15-8" date="1683806400">- Type:CVE
- ID:CVE-2023-26551
- SUG:NA
- DESC:make sure the buffer has enough room for the input extra characters</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 4.2.8p15-9" date="1683892800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:change the name of CVE-2023-26551</changelog>
</package>
<package pkgid="9c52803aecf73325de9be29b1c857ac8762a72a94a4311fa5c9ecab11a63d301" name="numpy" arch="src">
  <version epoch="1" ver="1.21.4" rel="8.oe2203sp1"/>
  <changelog author="renhongxun &lt;renhongxun@h-partners.com&gt; - 1.21.4-4" date="1653566400">- fix CVE-2021-34141</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@kylinsec.com.cn&gt; - 1:1.21.4-5" date="1692273600">- Add loongarch64 and sw_64 support</changelog>
  <changelog author="Qiang Wei &lt;qiang.wei@suse.com&gt; - 1:1.21.4-6" date="1698667200">- Remove f2py from numpy package. It is in numpy-f2py pakcage.</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 1:1.21.4-7" date="1706788800">- Do not pack open-source test case files</changelog>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 1:1.21.4-8" date="1709208000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:make the test check</changelog>
</package>
<package pkgid="ea0e07cf6d3325cd07ad7f0f2d148d04963b89fdc39b46d95b6857df1a1ffc81" name="nvwa" arch="src">
  <version epoch="0" ver="0.2" rel="4.oe2203sp1"/>
  <changelog author="anatasluo &lt;luolongjun@huawei.com&gt; - 0.0.1-1" date="1613649600">- Update to 0.0.1</changelog>
  <changelog author="anatasluo &lt;luolongjun@huawei.com&gt; 0.1-2" date="1616068800">- Update to 0.1-r2</changelog>
  <changelog author="snoweay &lt;snoweay@163.com&gt; - 0.1-3" date="1616155200">- Add secure compile args</changelog>
  <changelog author="anatasluo &lt;luolongjun@huawei.com&gt; - 0.2-1" date="1627646400">- Update to 0.2</changelog>
  <changelog author="anatasluo &lt;luolongjun@huawei.com&gt; - 0.2-2" date="1671019200">- Fix issues caused by ctrl-c and systemd</changelog>
  <changelog author="fushanqing &lt;fushanqing@kylinos.cn&gt; - 0.2-3" date="1671105600">- Enable debuginfo for fix strip</changelog>
  <changelog author="anatasluo &lt;luolongjun@huawei.com&gt; - 0.2-4" date="1672747200">- Solve the problem of parsing pid of message</changelog>
</package>
<package pkgid="c3320936223c61dee55dd06c8b80eb89105456eb483afc32e59254627e05d4a7" name="obs-bundled-gems" arch="src">
  <version epoch="0" ver="2.10.1" rel="10.oe2203sp1"/>
  <changelog author="zhaomengchao &lt;zhaomengchao3@huawei.com&gt; 2.10.1-2" date="1623240000">- fix obs-bundled-gems compilation failed.</changelog>
  <changelog author="lingsheng &lt;lingsheng@huawei.com&gt; 2.10.1-3" date="1632398400">- Fix exec permission in ruby/2.5.0/bin, change require to mariadb-server</changelog>
  <changelog author="Ge Wang &lt;wangge20@huawei.com&gt; 2.10.1-4" date="1647864000">- Fix compilation failed due to ruby and some rubygems upgraded</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; 2.10.1-5" date="1652356800">- Update xmlhash to 1.3.8</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; 2.10.1-6" date="1653393600">- Update Gemfile.lock factory_bot-6.2.1 and pry-0.13.1 and pry-byebug-3.9.0</changelog>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt; 2.10.1-7" date="1666872000">- Update gem version for obs-server 2.10.15</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 2.10.1-8" date="1670414400">- Add make dependency</changelog>
  <changelog author="zhangliangpengkun&lt;zhangliangpengkun@xfusion.com&gt; - 2.10.1-9" date="1675425600">- Add components that are missing from the source package</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; 2.10.1-10" date="1676289600">- Modify the rdoc version to 6.3.3</changelog>
</package>
<package pkgid="7208772392b67831b68c4405b5549d97e85977621f60f244be342f07987d7e7f" name="obs-bundled-gems" arch="src">
  <version epoch="0" ver="2.10.1" rel="8.oe2203sp1"/>
  <changelog author="zhaomengchao &lt;zhaomengchao3@huawei.com&gt; 2.10.1-2" date="1623240000">- fix obs-bundled-gems compilation failed.</changelog>
  <changelog author="lingsheng &lt;lingsheng@huawei.com&gt; 2.10.1-3" date="1632398400">- Fix exec permission in ruby/2.5.0/bin, change require to mariadb-server</changelog>
  <changelog author="Ge Wang &lt;wangge20@huawei.com&gt; 2.10.1-4" date="1647864000">- Fix compilation failed due to ruby and some rubygems upgraded</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; 2.10.1-5" date="1652356800">- Update xmlhash to 1.3.8</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; 2.10.1-6" date="1653393600">- Update Gemfile.lock factory_bot-6.2.1 and pry-0.13.1 and pry-byebug-3.9.0</changelog>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt; 2.10.1-7" date="1666872000">- Update gem version for obs-server 2.10.15</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 2.10.1-8" date="1670414400">- Add make dependency</changelog>
</package>
<package pkgid="b5d2fd435ae11b12a7517fd8c556064bd3cceb327ca582dd4afe8dff03ece9a5" name="obs-bundled-gems" arch="src">
  <version epoch="0" ver="2.10.15" rel="1.oe2203sp1"/>
  <changelog author="Ge Wang &lt;wangge20@huawei.com&gt; 2.10.1-4" date="1647864000">- Fix compilation failed due to ruby and some rubygems upgraded</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; 2.10.1-5" date="1652356800">- Update xmlhash to 1.3.8</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; 2.10.1-6" date="1653393600">- Update Gemfile.lock factory_bot-6.2.1 and pry-0.13.1 and pry-byebug-3.9.0</changelog>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt; 2.10.1-7" date="1666872000">- Update gem version for obs-server 2.10.15</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 2.10.1-8" date="1670414400">- Add make dependency</changelog>
  <changelog author="zhangliangpengkun&lt;zhangliangpengkun@xfusion.com&gt; - 2.10.1-9" date="1675425600">- Add components that are missing from the source package</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; 2.10.1-10" date="1676289600">- Modify the rdoc version to 6.3.3</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 2.10.1-11" date="1693224000">- add loongarch64 support</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2.10.15-1" date="1700568000">- Replace Gemfile with commit a39f185b53492d2207e9b2c0437fd7d407b864f3</changelog>
</package>
<package pkgid="bdab8efcfa2f34e46813eff347a2983465e69f5327f82dd76bfd8cc1aeb55075" name="obs-server" arch="src">
  <version epoch="0" ver="2.10.15" rel="8.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 2.10.11-5" date="1653393600">- Update gems version for fix rpmbuild error</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 2.10.11-6" date="1653566400">- Fix obs-api install warning</changelog>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt; - 2.10.15-1" date="1666872000">- Upgrade to version 2.10.15</changelog>
  <changelog author="wulei &lt;wulei80@h-partners.com&gt; - 2.10.15-2" date="1668686400">- The keyword openEuler is deleted from the patch name</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 2.10.15-3" date="1669636800">- Add make dependency</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; 2.10.15-4" date="1676289600">- Modify the rdoc version to 6.3.3</changelog>
  <changelog author="Ge Wang &lt;wang__ge@126.com&gt; - 2.10.15-5" date="1685707200">- Add post script to adatp selinux policy</changelog>
  <changelog author="Ge Wang &lt;wang__ge@126.com&gt; - 2.10.15-6" date="1686830400">- Replace src package with commit a39f185b53492d2207e9b2c0437fd7d407b864f3</changelog>
  <changelog author="Ge Wang &lt;wang__ge@126.com&gt; - 2.10.15-7" date="1687953600">- fix obs-clockwork service start failure</changelog>
  <changelog author="Ge Wang &lt;wang__ge@126.com&gt; - 2.10.15-8" date="1716206400">- Fix update failure</changelog>
</package>
<package pkgid="89f759684536aecb2ec79c40c3f1064cd6f468701a2fa87ceeca5d7488b7c490" name="obs-server" arch="src">
  <version epoch="0" ver="2.10.15" rel="9.oe2203sp1"/>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 2.10.11-6" date="1653566400">- Fix obs-api install warning</changelog>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt; - 2.10.15-1" date="1666872000">- Upgrade to version 2.10.15</changelog>
  <changelog author="wulei &lt;wulei80@h-partners.com&gt; - 2.10.15-2" date="1668686400">- The keyword openEuler is deleted from the patch name</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 2.10.15-3" date="1669636800">- Add make dependency</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; 2.10.15-4" date="1676289600">- Modify the rdoc version to 6.3.3</changelog>
  <changelog author="Ge Wang &lt;wang__ge@126.com&gt; - 2.10.15-5" date="1685707200">- Add post script to adatp selinux policy</changelog>
  <changelog author="Ge Wang &lt;wang__ge@126.com&gt; - 2.10.15-6" date="1686830400">- Replace src package with commit a39f185b53492d2207e9b2c0437fd7d407b864f3</changelog>
  <changelog author="Ge Wang &lt;wang__ge@126.com&gt; - 2.10.15-7" date="1687953600">- fix obs-clockwork service start failure</changelog>
  <changelog author="Ge Wang &lt;wang__ge@126.com&gt; - 2.10.15-8" date="1716206400">- Fix update failure</changelog>
  <changelog author="Ge Wang &lt;wang__ge@126.com&gt; - 2.10.15-9" date="1716465600">- Clear insignificance infomation when running post script</changelog>
</package>
<package pkgid="394de8ce6221737800d065234f9812bcee2a2976644e8bb7a89e6ad4d3172823" name="oec-hardware" arch="src">
  <version epoch="0" ver="1.1.4" rel="0.oe2203sp1"/>
  <changelog author="ylzhangah &lt;zhangyale3@h-partners.com&gt; - 1.1.2-1" date="1662206400">- Fix the status failed in checking oech.service status after stoped oech.service</changelog>
  <changelog author="cuixucui &lt;cuixucui1@h-partners.com&gt; - 1.1.2-2" date="1662379200">- Fix Check whether the tool is modified failed</changelog>
  <changelog author="meitingli &lt;bubble_mt@outlook.com&gt; - 1.1.2-3" date="1662465600">- Add generate compatibility information
- Fix gpu and keycard issues</changelog>
  <changelog author="cuixucui &lt;cuixucui1@h-partners.com&gt; - 1.1.2-4" date="1663761600">- Add requirements for system and bugfix
- Upgrade oec-hardware-server
- Update readme and design doc
- Fix nvme error
- Update network fibre check and log 
- Update description for perf test
- Add automatic configuration network card IP</changelog>
  <changelog author="cuixucui &lt;cuixucui1@h-partners.com&gt; - 1.1.2-5" date="1665403200">- fix the bug that the test board information is not added to the configuration file
- Add kabi for hardware critical test
- Optimize disk/raid/fc/ethernet/infiniband test suite
- Fix the bug of reading nvme data failed
- Add file size check when uploading file to server</changelog>
  <changelog author="zhangyale &lt;zhangyale3@h-partners.com&gt; - 1.1.3-0" date="1666612800">- Add support for openEuler 22.03 LTS SP1
- Add AMD GPU testcase
- Add automatic configuration network card IP
- Add generate compatibility information</changelog>
  <changelog author="cuixucui &lt;cuixucui1@h-partner.com&gt; - 1.1.3-1" date="1666785600">- Add default values to the parameters of get_disk function</changelog>
  <changelog author="cuixucui &lt;cuixucui1@h-partner.com&gt; - 1.1.3-2" date="1667995200">- Fix code issue and update log print in network
- Cancel deleting the IP that automatically configured on the server
- Fix cdrom bug</changelog>
  <changelog author="liqiang &lt;liqiang332@h-partner.com&gt; - 1.1.3-3" date="1670932800">- Fix libswsds.so not stripped
- Fix the value of kernel.src obtained by the kabi test case is incorrect
- Add board infomation and fix memory bug
- Fix the block size fails to be obtained during the NVME test
- Judge whether to support kabi testing by architecture
- Update readme and dev_design</changelog>
  <changelog author="cuixucui &lt;cuixucui1@h-partner.com&gt; - 1.1.4-0" date="1677585600">- Add board information in the test report
- Add spdk test case
- Add dpdk test case
- Update pci.ids file</changelog>
</package>
<package pkgid="c42ddc5bee354aaf772ee6047cdb62c5e09045b4dcc71f66670a7e623120ee41" name="oec-hardware" arch="src">
  <version epoch="0" ver="1.1.4" rel="2.oe2203sp1"/>
  <changelog author="meitingli &lt;bubble_mt@outlook.com&gt; - 1.1.2-3" date="1662465600">- Add generate compatibility information
- Fix gpu and keycard issues</changelog>
  <changelog author="cuixucui &lt;cuixucui1@h-partners.com&gt; - 1.1.2-4" date="1663761600">- Add requirements for system and bugfix
- Upgrade oec-hardware-server
- Update readme and design doc
- Fix nvme error
- Update network fibre check and log 
- Update description for perf test
- Add automatic configuration network card IP</changelog>
  <changelog author="cuixucui &lt;cuixucui1@h-partners.com&gt; - 1.1.2-5" date="1665403200">- fix the bug that the test board information is not added to the configuration file
- Add kabi for hardware critical test
- Optimize disk/raid/fc/ethernet/infiniband test suite
- Fix the bug of reading nvme data failed
- Add file size check when uploading file to server</changelog>
  <changelog author="zhangyale &lt;zhangyale3@h-partners.com&gt; - 1.1.3-0" date="1666612800">- Add support for openEuler 22.03 LTS SP1
- Add AMD GPU testcase
- Add automatic configuration network card IP
- Add generate compatibility information</changelog>
  <changelog author="cuixucui &lt;cuixucui1@h-partner.com&gt; - 1.1.3-1" date="1666785600">- Add default values to the parameters of get_disk function</changelog>
  <changelog author="cuixucui &lt;cuixucui1@h-partner.com&gt; - 1.1.3-2" date="1667995200">- Fix code issue and update log print in network
- Cancel deleting the IP that automatically configured on the server
- Fix cdrom bug</changelog>
  <changelog author="liqiang &lt;liqiang332@h-partner.com&gt; - 1.1.3-3" date="1670932800">- Fix libswsds.so not stripped
- Fix the value of kernel.src obtained by the kabi test case is incorrect
- Add board infomation and fix memory bug
- Fix the block size fails to be obtained during the NVME test
- Judge whether to support kabi testing by architecture
- Update readme and dev_design</changelog>
  <changelog author="cuixucui &lt;cuixucui1@h-partner.com&gt; - 1.1.4-0" date="1677585600">- Add board information in the test report
- Add spdk test case
- Add dpdk test case
- Update pci.ids file</changelog>
  <changelog author="cuixucui &lt;cuixucui1@h-partner.com&gt; - 1.1.4-1" date="1686657600">- Add igc dpdk
- Secure_filename to improve input robustness and security
- Correcting bug, self.changed_ Logpath is a string
- Increase the number of network card up detection times
- Resolve the issue of IP configuration failure</changelog>
  <changelog author="cuixucui &lt;cuixucui1@h-partner.com&gt; - 1.1.4-2" date="1686916800">- Fix import Secure_Filename failure</changelog>
</package>
<package pkgid="ae256bd0dc7c31f3ed831d12f136cdc648a1551ad2210ead4a69a54ea3886d73" name="oec-hardware" arch="src">
  <version epoch="0" ver="1.1.5" rel="0.oe2203sp1"/>
  <changelog author="cuixucui &lt;cuixucui1@h-partners.com&gt; - 1.1.2-2" date="1662379200">- Fix Check whether the tool is modified failed</changelog>
  <changelog author="meitingli &lt;bubble_mt@outlook.com&gt; - 1.1.2-3" date="1662465600">- Add generate compatibility information
- Fix gpu and keycard issues</changelog>
  <changelog author="cuixucui &lt;cuixucui1@h-partners.com&gt; - 1.1.2-4" date="1663761600">- Add requirements for system and bugfix
- Upgrade oec-hardware-server
- Update readme and design doc
- Fix nvme error
- Update network fibre check and log 
- Update description for perf test
- Add automatic configuration network card IP</changelog>
  <changelog author="cuixucui &lt;cuixucui1@h-partners.com&gt; - 1.1.2-5" date="1665403200">- fix the bug that the test board information is not added to the configuration file
- Add kabi for hardware critical test
- Optimize disk/raid/fc/ethernet/infiniband test suite
- Fix the bug of reading nvme data failed
- Add file size check when uploading file to server</changelog>
  <changelog author="zhangyale &lt;zhangyale3@h-partners.com&gt; - 1.1.3-0" date="1666612800">- Add support for openEuler 22.03 LTS SP1
- Add AMD GPU testcase
- Add automatic configuration network card IP
- Add generate compatibility information</changelog>
  <changelog author="cuixucui &lt;cuixucui1@h-partner.com&gt; - 1.1.3-1" date="1666785600">- Add default values to the parameters of get_disk function</changelog>
  <changelog author="cuixucui &lt;cuixucui1@h-partner.com&gt; - 1.1.3-2" date="1667995200">- Fix code issue and update log print in network
- Cancel deleting the IP that automatically configured on the server
- Fix cdrom bug</changelog>
  <changelog author="liqiang &lt;liqiang332@h-partner.com&gt; - 1.1.3-3" date="1670932800">- Fix libswsds.so not stripped
- Fix the value of kernel.src obtained by the kabi test case is incorrect
- Add board infomation and fix memory bug
- Fix the block size fails to be obtained during the NVME test
- Judge whether to support kabi testing by architecture
- Update readme and dev_design</changelog>
  <changelog author="cuixucui &lt;cuixucui1@h-partner.com&gt; - 1.1.4-0" date="1677585600">- Add board information in the test report
- Add spdk test case
- Add dpdk test case
- Update pci.ids file</changelog>
  <changelog author="cuixucui &lt;cuixucui@h-partner.com&gt; - 1.1.5-0" date="1698148800">- Add support for openEuler 20.03 LTS SP4, openEuler 22.03 LTS SP2, openEuler 22.03 LTS SP3
- Add modifications to Kylinsec with oec-hardware
- Add support for Loongson and SW architectures
- Bugfix</changelog>
</package>
<package pkgid="ae860745655ff8c428c277f244d2ee013dff854e91e946689da532f0f9366c21" name="oec-hardware" arch="src">
  <version epoch="0" ver="1.1.5" rel="1.oe2203sp1"/>
  <changelog author="meitingli &lt;bubble_mt@outlook.com&gt; - 1.1.2-3" date="1662465600">- Add generate compatibility information
- Fix gpu and keycard issues</changelog>
  <changelog author="cuixucui &lt;cuixucui1@h-partners.com&gt; - 1.1.2-4" date="1663761600">- Add requirements for system and bugfix
- Upgrade oec-hardware-server
- Update readme and design doc
- Fix nvme error
- Update network fibre check and log 
- Update description for perf test
- Add automatic configuration network card IP</changelog>
  <changelog author="cuixucui &lt;cuixucui1@h-partners.com&gt; - 1.1.2-5" date="1665403200">- fix the bug that the test board information is not added to the configuration file
- Add kabi for hardware critical test
- Optimize disk/raid/fc/ethernet/infiniband test suite
- Fix the bug of reading nvme data failed
- Add file size check when uploading file to server</changelog>
  <changelog author="zhangyale &lt;zhangyale3@h-partners.com&gt; - 1.1.3-0" date="1666612800">- Add support for openEuler 22.03 LTS SP1
- Add AMD GPU testcase
- Add automatic configuration network card IP
- Add generate compatibility information</changelog>
  <changelog author="cuixucui &lt;cuixucui1@h-partner.com&gt; - 1.1.3-1" date="1666785600">- Add default values to the parameters of get_disk function</changelog>
  <changelog author="cuixucui &lt;cuixucui1@h-partner.com&gt; - 1.1.3-2" date="1667995200">- Fix code issue and update log print in network
- Cancel deleting the IP that automatically configured on the server
- Fix cdrom bug</changelog>
  <changelog author="liqiang &lt;liqiang332@h-partner.com&gt; - 1.1.3-3" date="1670932800">- Fix libswsds.so not stripped
- Fix the value of kernel.src obtained by the kabi test case is incorrect
- Add board infomation and fix memory bug
- Fix the block size fails to be obtained during the NVME test
- Judge whether to support kabi testing by architecture
- Update readme and dev_design</changelog>
  <changelog author="cuixucui &lt;cuixucui1@h-partner.com&gt; - 1.1.4-0" date="1677585600">- Add board information in the test report
- Add spdk test case
- Add dpdk test case
- Update pci.ids file</changelog>
  <changelog author="cuixucui &lt;cuixucui@h-partner.com&gt; - 1.1.5-0" date="1698148800">- Add support for openEuler 20.03 LTS SP4, openEuler 22.03 LTS SP2, openEuler 22.03 LTS SP3
- Add modifications to Kylinsec with oec-hardware
- Add support for Loongson and SW architectures
- Bugfix</changelog>
  <changelog author="cuixucui &lt;cuixucui@h-partner.com&gt; - 1.1.5-1" date="1701259200">- Add virtual cases
- Resolve IB startup IB_Read_BW service failure issue
- Delete redundant references
- Resolve incorrect type in vgpu result data
- Resolve the issue of getting the kernel source rpm</changelog>
</package>
<package pkgid="21460056a49e326504532d87f403fd363005d6094e1f62ab02fbceb1578ffd5c" name="oec-hardware" arch="src">
  <version epoch="0" ver="1.1.5" rel="2.oe2203sp1"/>
  <changelog author="cuixucui &lt;cuixucui1@h-partners.com&gt; - 1.1.2-4" date="1663761600">- Add requirements for system and bugfix
- Upgrade oec-hardware-server
- Update readme and design doc
- Fix nvme error
- Update network fibre check and log 
- Update description for perf test
- Add automatic configuration network card IP</changelog>
  <changelog author="cuixucui &lt;cuixucui1@h-partners.com&gt; - 1.1.2-5" date="1665403200">- fix the bug that the test board information is not added to the configuration file
- Add kabi for hardware critical test
- Optimize disk/raid/fc/ethernet/infiniband test suite
- Fix the bug of reading nvme data failed
- Add file size check when uploading file to server</changelog>
  <changelog author="zhangyale &lt;zhangyale3@h-partners.com&gt; - 1.1.3-0" date="1666612800">- Add support for openEuler 22.03 LTS SP1
- Add AMD GPU testcase
- Add automatic configuration network card IP
- Add generate compatibility information</changelog>
  <changelog author="cuixucui &lt;cuixucui1@h-partner.com&gt; - 1.1.3-1" date="1666785600">- Add default values to the parameters of get_disk function</changelog>
  <changelog author="cuixucui &lt;cuixucui1@h-partner.com&gt; - 1.1.3-2" date="1667995200">- Fix code issue and update log print in network
- Cancel deleting the IP that automatically configured on the server
- Fix cdrom bug</changelog>
  <changelog author="liqiang &lt;liqiang332@h-partner.com&gt; - 1.1.3-3" date="1670932800">- Fix libswsds.so not stripped
- Fix the value of kernel.src obtained by the kabi test case is incorrect
- Add board infomation and fix memory bug
- Fix the block size fails to be obtained during the NVME test
- Judge whether to support kabi testing by architecture
- Update readme and dev_design</changelog>
  <changelog author="cuixucui &lt;cuixucui1@h-partner.com&gt; - 1.1.4-0" date="1677585600">- Add board information in the test report
- Add spdk test case
- Add dpdk test case
- Update pci.ids file</changelog>
  <changelog author="cuixucui &lt;cuixucui@h-partner.com&gt; - 1.1.5-0" date="1698148800">- Add support for openEuler 20.03 LTS SP4, openEuler 22.03 LTS SP2, openEuler 22.03 LTS SP3
- Add modifications to Kylinsec with oec-hardware
- Add support for Loongson and SW architectures
- Bugfix</changelog>
  <changelog author="cuixucui &lt;cuixucui@h-partner.com&gt; - 1.1.5-1" date="1701259200">- Add virtual cases
- Resolve IB startup IB_Read_BW service failure issue
- Delete redundant references
- Resolve incorrect type in vgpu result data
- Resolve the issue of getting the kernel source rpm</changelog>
  <changelog author="cuixucui &lt;cuixucui@h-partner.com&gt; - 1.1.5-1" date="1701259201">- Resolve kdump\watchdog\cpufreq\kabiwhitelist\network test failure issue 
- Add fio test cases:read,write,randread,randwrite
- Solve the nvme line break issue in the command line interface
- Fix compilation errors in the make command
- Add Vulkan testcase for nvida GPU
- Resolve the issue of oech server startup failure on version 24.03</changelog>
</package>
<package pkgid="f99130f144d9b9e336e7ac045a5e8484c6fcaf4185b57f29dfb7e7c9d6f711c3" name="oncn-bwm" arch="src">
  <version epoch="0" ver="1.1" rel="1.oe2203sp1"/>
  <changelog author="wo_cow &lt;niuiqianqian@huawei.com&gt; - 1.0-1" date="1657800000">- init oncn-bwm</changelog>
  <changelog author="wo_cow &lt;niuiqianqian@huawei.com&gt; - 1.0-2" date="1658318400">- add permission to dir</changelog>
  <changelog author="JofDiamonds &lt;kwb0523@163.com&gt; - 1.0-3" date="1668513600">- adapt libbpf-0.8.1</changelog>
  <changelog author="JofDiamonds &lt;kwb0523@163.com&gt; - 1.0-4" date="1672056000">- add oncn-bwm.yaml</changelog>
  <changelog author="JofDiamonds &lt;kwb0523@163.com&gt; - 1.0-5" date="1672920000">- update oncn-bwm.yaml</changelog>
  <changelog author="JofDiamonds &lt;kwb0523@163.com&gt; - 1.1-1" date="1676462400">- clean code and use securec function</changelog>
</package>
<package pkgid="157dcc95ec0ebf5059408bffb0506e8cc80046cf5654f89142bad24dc0c1a83b" name="oncn-bwm" arch="src">
  <version epoch="0" ver="1.1" rel="3.oe2203sp1"/>
  <changelog author="wo_cow &lt;niuiqianqian@huawei.com&gt; - 1.0-1" date="1657800000">- init oncn-bwm</changelog>
  <changelog author="wo_cow &lt;niuiqianqian@huawei.com&gt; - 1.0-2" date="1658318400">- add permission to dir</changelog>
  <changelog author="JofDiamonds &lt;kwb0523@163.com&gt; - 1.0-3" date="1668513600">- adapt libbpf-0.8.1</changelog>
  <changelog author="JofDiamonds &lt;kwb0523@163.com&gt; - 1.0-4" date="1672056000">- add oncn-bwm.yaml</changelog>
  <changelog author="JofDiamonds &lt;kwb0523@163.com&gt; - 1.0-5" date="1672920000">- update oncn-bwm.yaml</changelog>
  <changelog author="JofDiamonds &lt;kwb0523@163.com&gt; - 1.1-1" date="1676462400">- clean code and use securec function</changelog>
  <changelog author="JofDiamonds &lt;kwb0523@163.com&gt; - 1.1-2" date="1684756800">- adapt libbpf-0.8.1: prog_load_xattr will deprecated and use another way to load bpf prog</changelog>
  <changelog author="supercharge &lt;xiesongyang@huawei.com&gt; - 1.1-3" date="1684756801">- fix offline packets block</changelog>
</package>
<package pkgid="53b7aa65f2f58101f38b36008a7778b2b73953231fb0c51f8aba51344ab71656" name="open-iscsi" arch="src">
  <version epoch="0" ver="2.1.5" rel="14.oe2203sp1"/>
  <changelog author="haowenchao &lt;haowenchao@huawei.com&gt; - 2.1.5-8" date="1655985600">- Remove unused fwparam_ibft.[ch] files in fwparam_ibft</changelog>
  <changelog author="haowenchao &lt;haowenchao@huawei.com&gt; - 2.1.5-9" date="1664280000">- Substitute self-developed patch with mainline patch</changelog>
  <changelog author="haowenchao &lt;haowenchao@huawei.com&gt; - 2.1.5-10" date="1669982400">- Backport bugfix patches from mainline</changelog>
  <changelog author="haowenchao &lt;haowenchao@huawei.com&gt; - 2.1.5-11" date="1673956800">- iscsid: clear scanning thread's PR_SET_IO_FLUSHER flag</changelog>
  <changelog author="haowenchao &lt;haowenchao@huawei.com&gt; - 2.1.5-12" date="1673956801">- iscsid: stop connection for recovery if error is not timeout in iscsi_login_eh</changelog>
  <changelog author="louhongxiang &lt;louhongxiang@huawei.com&gt; - 2.1.5-13" date="1687694400">- iscsid: fix format overflow warning.</changelog>
  <changelog author="jiangjianjun &lt;jiangjianjun3@huawei.com&gt; - 2.1.5-14" date="1708430400">- update open-iscsi.spec</changelog>
</package>
<package pkgid="2a0e9c24940596c2867a0b0ce0619a1db423f04f6c8bfea3f12b4289cea8c30f" name="open-vm-tools" arch="src">
  <version epoch="0" ver="12.0.5" rel="3.oe2203sp1"/>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 12.0.5-1" date="1655726400">- Package init</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 12.0.5-2" date="1656072000">- Fix build break in _service mode</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 12.0.5-3" date="1694433600">- Fix CVE-2023-20867 and CVE-2023-20900</changelog>
</package>
<package pkgid="5c8bb03bbd2c835d7d0f24eb035149fc0f8250ef860b2db751787910e1c39148" name="open-vm-tools" arch="src">
  <version epoch="0" ver="12.0.5" rel="4.oe2203sp1"/>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 12.0.5-1" date="1655726400">- Package init</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 12.0.5-2" date="1656072000">- Fix build break in _service mode</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 12.0.5-3" date="1694433600">- Fix CVE-2023-20867 and CVE-2023-20900</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 12.0.5-4" date="1699876800">- Fix CVE-2023-34058 CVE-2023-34059</changelog>
</package>
<package pkgid="fec7f76e4b0944ad2f0c0893277fd25fe3bbe24895312f57b7d04f47e598beee" name="openEuler-release" arch="src">
  <version epoch="0" ver="22.03LTS_SP1" rel="57.oe2203sp1"/>
  <changelog author="xiasenlin &lt;xiasenlin1@huawei.com&gt; - 1.0-52" date="1657886400">- Update EULA license for donate</changelog>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt; - 1.0-53" date="1667908800">- sysconfig parameters have a impact on performance,comment out the relevant content</changelog>
  <changelog author="yangmingtai &lt;yangmingtai@huawei.com&gt; - 1.0-54" date="1667908801">- delete color.sh</changelog>
  <changelog author="wangchong &lt;wangchong56@huawei.com&gt; - 1.0-55" date="1668772800">- modify generic_patch_level_extend</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 1.0-56" date="1670846400">- Delete package openEuler-performance</changelog>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 1.0-57" date="1716206400">- Delete Processes print</changelog>
</package>
<package pkgid="1a978f7cf33a2ef40ac9886e848284540cf294272e6bde581f2ca7c277cfd79e" name="openEuler-repos" arch="src">
  <version epoch="0" ver="1.0" rel="3.6.oe2203sp1"/>
  <changelog author="wangchong &lt;wangchong56@huawei.com&gt; - 1.0-3.2" date="1633694400">- Type:NA
- ID:NA
- SUG:NA
- DESC:fix EPOL repo error</changelog>
  <changelog author="wangchong &lt;wangchong56@huawei.com&gt; - 1.0-3.3" date="1642248000">- Type:NA
- ID:NA
- SUG:NA
- DESC:modify repo</changelog>
  <changelog author="wangchong &lt;wangchong56@huawei.com&gt; - 1.0-3.4" date="1668772800">- Type:NA
- ID:NA
- SUG:NA
- DESC:modify repo</changelog>
  <changelog author="CaoXueliang &lt;caoxl78320@163.com&gt; - 1.0-3.5" date="1670068800">- Type:NA
- ID:NA
- SUG:NA
- DESC: add RPM-GPG-KEY-EBS</changelog>
  <changelog author="jufangqun &lt;jufangqun@huawei.com&gt; - 1.0-3.6" date="1693483200">- Type:NA
- ID:NA
- SUG:NA
- DESC: configure metalink in repo</changelog>
</package>
<package pkgid="7644066721a4b7ca5cb702ee2d1947afb8dbaba78e299ed34eb0bf4a6c53e12d" name="openEuler-repos" arch="src">
  <version epoch="0" ver="1.0" rel="3.7.oe2203sp1"/>
  <changelog author="wangchong &lt;wangchong56@huawei.com&gt; - 1.0-3.4" date="1668772800">- Type:NA
- ID:NA
- SUG:NA
- DESC:modify repo</changelog>
  <changelog author="CaoXueliang &lt;caoxl78320@163.com&gt; - 1.0-3.5" date="1670068800">- Type:NA
- ID:NA
- SUG:NA
- DESC: add RPM-GPG-KEY-EBS</changelog>
  <changelog author="jufangqun &lt;jufangqun@huawei.com&gt; - 1.0-3.6" date="1693483200">- Type:NA
- ID:NA
- SUG:NA
- DESC: configure metalink in repo</changelog>
  <changelog author="fuyong &lt;fuyong29@h-partners.com&gt; - 1.0-3.7" date="1721736000">- Type:NA
- ID:NA
- SUG:NA
- DESC: update baseurl</changelog>
</package>
<package pkgid="1f840cf4a9125ae23b8b41e4a0ca144336652dd845ff5d0b594c6f161b33d235" name="opengauss" arch="src">
  <version epoch="0" ver="2.1.0" rel="8.oe2203sp1"/>
  <changelog author="zhangxubo &lt;zhangxubo1@huawei.com&gt; - 2.1.0-1" date="1638360000">- Package init</changelog>
  <changelog author="zhangxubo &lt;zhangxubo1@huawei.com&gt; - 2.1.0-2" date="1639396800">- Fix bugs: Mask dependencies acquired during installation</changelog>
  <changelog author="zhangxubo &lt;zhangxubo1@huawei.com&gt; - 2.1.0-3" date="1642852800">- Fix bugs: #I4RVNX</changelog>
  <changelog author="zhangxubo &lt;zhangxubo1@huawei.com&gt; - 2.1.0-4" date="1643284800">- Fix bugs: #I4SDWX</changelog>
  <changelog author="zhangxubo &lt;zhangxubo1@huawei.com&gt; - 2.1.0-5" date="1647086400">- Fix bugs: #I4VDYQ #I4V624 #I4UOUU #I4TCDB #I4TCB8</changelog>
  <changelog author="ouyangminxiang &lt;ouyangminxiang@kylinsec.com.cn&gt; - 2.1.0-6" date="1648641600">- add kylinsec platform</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 2.1.0-7" date="1681128000">- add /etc/kylinsec-release support for KylinSec</changelog>
  <changelog author="dillon chen&lt;dillon.chen@gmail.com&gt; -2.1.0-8" date="1686052800">- Fix bugs: #I677QX； add lsof</changelog>
</package>
<package pkgid="4f88dff0066e26204e1f308da33fbd484ed35ee32b3b7e7b2b1450979aa6f4c4" name="openjfx8" arch="src">
  <version epoch="0" ver="8u370" rel="1.oe2203sp1"/>
  <changelog author="Benshuai5D &lt;zhangyunbo7@huawei.com&gt; - 8.0.202-26.b07" date="1626004800">- add openjfx8.yaml</changelog>
  <changelog author="Noah &lt;hedongbo@huawei.com&gt; - 8.0,202-26.b07" date="1626868800">- change maven repository to huawei cloud</changelog>
  <changelog author="Noah &lt;hedongbo@huawei.com&gt; - 8u330.1" date="1657627200">- change upstream to openeuler
- rm 0004-Fix-Compilation-Flags.patch
- rm 0005-fxpackager-extract-jre-accept-symlink.patch
- rm 0003-fix-cast-between-incompatible-function-types.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 8u340.1" date="1658232000">- update sqlite from 3.35.3 to 3.37.2</changelog>
  <changelog author="douyiwang &lt;douyiwang@huawei.com&gt; - 8u352.1" date="1670414400">- update 8u340.tar.bz to 8u352.tar.gz</changelog>
  <changelog author="douyiwang &lt;douyiwang@huawei.com&gt; - 8u353.1" date="1670846400">- update 8u352.tar.bz to 8u353.tar.gz</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 8u370.1" date="1687262400">- update 8u353.tar.gz to 8u370.tar.gz</changelog>
</package>
<package pkgid="5aad25cc5502874ce2f64fc64c6f70b7e5691e61ffa8d48b38690f765c5c9ef3" name="openjpeg2" arch="src">
  <version epoch="0" ver="2.5.0" rel="3.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 2.5.0-1" date="1667649600">- update 2.5.0</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.5.0-2" date="1677585600">- Remove useless buildrequires</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.5.0-3" date="1720699200">- Type:cves
- ID:CVE-2023-39328
- SUG:NA
- DESC:fix CVE-2023-39328</changelog>
</package>
<package pkgid="c3661870bbd22bb9c1ae440e70980595735b2dbc4642b6905381008eccdf74a2" name="openldap" arch="src">
  <version epoch="0" ver="2.6.0" rel="5.oe2203sp1"/>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 2.4.50-8" date="1625832000">- fix CVE-2020-25709 CVE-2020-25710</changelog>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 2.6.0-1" date="1640088000">- Type:requirement
- ID:NA
- SUG:restart
- DESC:update openldap to 2.6.0</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 2.6.0-2" date="1647950400">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:delete useless so file</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 2.6.0-3" date="1652702400">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:fix cve-2022-29155</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 2.6.0-4" date="1667822400">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:backport patch</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 2.6.0-5" date="1677585600">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:add options for cross build</changelog>
</package>
<package pkgid="cb7ecb8bd686ecfe8561e55e2d001da725fe5879cb81b6365f95458d5bd65192" name="openldap" arch="src">
  <version epoch="0" ver="2.6.0" rel="6.oe2203sp1"/>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 2.4.50-8" date="1625832000">- fix CVE-2020-25709 CVE-2020-25710</changelog>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 2.6.0-1" date="1640088000">- Type:requirement
- ID:NA
- SUG:restart
- DESC:update openldap to 2.6.0</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 2.6.0-2" date="1647950400">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:delete useless so file</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 2.6.0-3" date="1652702400">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:fix cve-2022-29155</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 2.6.0-4" date="1667822400">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:backport patch</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 2.6.0-5" date="1677585600">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:add options for cross build</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 2.6.0-6" date="1686139200">- Type:cve
- CVE:cve-2023-2953
- SUG:restart
- DESC:fix cve-2023-2953</changelog>
</package>
<package pkgid="bd68861b8b12e8da030b3ebdd43e20e0d1fdbd53f5f8d9b07c763e487ea636bd" name="openldap" arch="src">
  <version epoch="0" ver="2.6.0" rel="7.oe2203sp1"/>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 2.6.0-1" date="1640088000">- Type:requirement
- ID:NA
- SUG:restart
- DESC:update openldap to 2.6.0</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 2.6.0-2" date="1647950400">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:delete useless so file</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 2.6.0-3" date="1652702400">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:fix cve-2022-29155</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 2.6.0-4" date="1667822400">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:backport patch</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 2.6.0-5" date="1677585600">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:add options for cross build</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 2.6.0-6" date="1686139200">- Type:cve
- CVE:cve-2023-2953
- SUG:restart
- DESC:fix cve-2023-2953</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 2.6.0-7" date="1690200000">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:fix empty soft link</changelog>
</package>
<package pkgid="1a62bf2cf1cbdd6718f63d1cbf45817a123cba2a22c4c19ed11e01b5297a432b" name="openmpi" arch="src">
  <version epoch="0" ver="4.1.4" rel="3.oe2203sp1"/>
  <changelog author="Pengju Jiang &lt;jiangpengju2@huawei.com&gt; - 2.1.1-20" date="1631188800">- solve the strip and rpath problem of safe conversion</changelog>
  <changelog author="wulei &lt;wulei80@h-partners.com&gt; - 4.1.4-1" date="1655726400">- Upgrade to 4.1.1</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 4.1.4-2" date="1659096000">- Reslove conflict with pmix-devel and update license</changelog>
  <changelog author="wulei &lt;wu_lei@hoperun.com&gt; - 4.1.4-3" date="1692187200">- Modify the /usr/lib64/openmpi/bin path to /usr/bin</changelog>
</package>
<package pkgid="c9e721e5f1c4433371e695c221399341516e2272895402478764caa9e89b980e" name="openssh" arch="src">
  <version epoch="0" ver="8.8p1" rel="18.oe2203sp1"/>
  <changelog author="duyiwei&lt;duyiwei@kylinos.cn&gt; - 8.8P1-9" date="1670414400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:enable "include /etc/ssh/sshd_config.d/*.config" again</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-10" date="1670932800">- Type:feature
- CVE:NA
- SUG:NA
- DESC:Add sw64 architecture</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-11" date="1670932801">- Type:feature
- CVE:NA
- SUG:NA
- DESC:Add loongarch64 architecture</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-12" date="1670932802">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport some upstream patches</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-13" date="1670932803">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add strict scp check for CVE-2020-15778</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-14" date="1671192000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix ssh-keygen -Y check novalidate requires name</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-15" date="1672315200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:avoid integer overflow of auth attempts har</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-16" date="1672747200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:always make tests</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-17" date="1673006400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix test failure and enable make tests</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-18" date="1675684800">- Type:CVE
- CVE:CVE-2023-25136
- SUG:NA
- DESC:fix CVE-2023-25136</changelog>
</package>
<package pkgid="51465d2c7323348062f7dfe4633927dae080f0ab2dd7a1257a6b1030083d6481" name="openssh" arch="src">
  <version epoch="0" ver="8.8p1" rel="23.oe2203sp1"/>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-14" date="1671192000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix ssh-keygen -Y check novalidate requires name</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-15" date="1672315200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:avoid integer overflow of auth attempts har</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-16" date="1672747200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:always make tests</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-17" date="1673006400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix test failure and enable make tests</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-18" date="1675684800">- Type:CVE
- CVE:CVE-2023-25136
- SUG:NA
- DESC:fix CVE-2023-25136</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-19" date="1678363200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:set default ssh config</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-20" date="1679572800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport some upstream patches and modify some patches numbers</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-21" date="1685188800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix environment variable</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-22" date="1686139200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix misspelling</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-23" date="1690459200">- Type:CVE
- CVE:CVE-2023-38408
- SUG:NA
- DESC:fix CVE-2023-38408</changelog>
</package>
<package pkgid="5379c0f976221df304a26534b3942cb934c17d6e7d86a4d392ba8305142ddc20" name="openssh" arch="src">
  <version epoch="0" ver="8.8p1" rel="25.oe2203sp1"/>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-16" date="1672747200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:always make tests</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-17" date="1673006400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix test failure and enable make tests</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-18" date="1675684800">- Type:CVE
- CVE:CVE-2023-25136
- SUG:NA
- DESC:fix CVE-2023-25136</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-19" date="1678363200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:set default ssh config</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-20" date="1679572800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport some upstream patches and modify some patches numbers</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-21" date="1685188800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix environment variable</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-22" date="1686139200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix misspelling</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-23" date="1690459200">- Type:CVE
- CVE:CVE-2023-38408
- SUG:NA
- DESC:fix CVE-2023-38408</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-24" date="1692100800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:In channel_request_remote_forwarding the parameters</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-25" date="1703332800">- Type:CVE
- CVE:CVE-2023-48795,CVE-2023-51385
- SUG:NA
- DESC:fix CVE-2023-48795 and CVE-2023-51385</changelog>
</package>
<package pkgid="f143730f9870d3df1f30a7bb53c1da2790b176f383d43c7d7d878c841d425830" name="openssh" arch="src">
  <version epoch="0" ver="8.8p1" rel="31.oe2203sp1"/>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-22" date="1686139200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix misspelling</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-23" date="1690459200">- Type:CVE
- CVE:CVE-2023-38408
- SUG:NA
- DESC:fix CVE-2023-38408</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-24" date="1692100800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:In channel_request_remote_forwarding the parameters</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-25" date="1703332800">- Type:CVE
- CVE:CVE-2023-48795,CVE-2023-51385
- SUG:NA
- DESC:fix CVE-2023-48795 and CVE-2023-51385</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-26" date="1704888000">- Type:CVE
- CVE:CVE-2023-48795
- SUG:NA
- DESC:fix CVE-2023-48795 by using the other patch instead</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-27" date="1706702400">- Type:bugfix
- CVE:
- SUG:NA
- DESC:move pam_ssh_agent_auth man page to sub-package</changelog>
  <changelog author="songjuntao&lt;songjuntao@kylinos.cn&gt; - 8.8p1-28" date="1706875200">- Type:bugfix
- CVE:
- SUG:NA
- DESC: fix memory leak in kex2 exchange function</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-29" date="1710417600">- Type:bugfix
- CVE:
- SUG:NA
- DESC:fix setting the number of authentication attempts failed</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-30" date="1714392000">- Type:bugfix
- CVE:
- SUG:NA
- DESC:Disable SElinux when make tests</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-31" date="1719921600">- Type:CVE
- CVE:CVE-2024-6387
- SUG:NA
- DESC:Fix CVE-2024-6387</changelog>
</package>
<package pkgid="e2f8ba2a7fdc731d69df4044f3a6b5c2ab8e15788098a7b467a7cbfdeaa7db14" name="openssh" arch="src">
  <version epoch="0" ver="8.8p1" rel="32.oe2203sp1"/>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-23" date="1690459200">- Type:CVE
- CVE:CVE-2023-38408
- SUG:NA
- DESC:fix CVE-2023-38408</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-24" date="1692100800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:In channel_request_remote_forwarding the parameters</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-25" date="1703332800">- Type:CVE
- CVE:CVE-2023-48795,CVE-2023-51385
- SUG:NA
- DESC:fix CVE-2023-48795 and CVE-2023-51385</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-26" date="1704888000">- Type:CVE
- CVE:CVE-2023-48795
- SUG:NA
- DESC:fix CVE-2023-48795 by using the other patch instead</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-27" date="1706702400">- Type:bugfix
- CVE:
- SUG:NA
- DESC:move pam_ssh_agent_auth man page to sub-package</changelog>
  <changelog author="songjuntao&lt;songjuntao@kylinos.cn&gt; - 8.8p1-28" date="1706875200">- Type:bugfix
- CVE:
- SUG:NA
- DESC: fix memory leak in kex2 exchange function</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-29" date="1710417600">- Type:bugfix
- CVE:
- SUG:NA
- DESC:fix setting the number of authentication attempts failed</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-30" date="1714392000">- Type:bugfix
- CVE:
- SUG:NA
- DESC:Disable SElinux when make tests</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-31" date="1719921600">- Type:CVE
- CVE:CVE-2024-6387
- SUG:NA
- DESC:Fix CVE-2024-6387</changelog>
  <changelog author="songjuntao&lt;songjuntao@kylinos.cn&gt; - 8.8p1-32" date="1720612800">- Type:CVE
- CVE:CVE-2024-6409
- SUG:NA
- DESC:Fix CVE-2024-6409</changelog>
</package>
<package pkgid="dd14aabb3df1dff3902bc2b58c56cfca376d566012d0638dc1525b272a3b6917" name="openssl" arch="src">
  <version epoch="1" ver="1.1.1m" rel="16.oe2203sp1"/>
  <changelog author="ExtinctFire &lt;shenyining_00@126.com&gt; - 1:1.1.1m-7" date="1658836800">- fix expiring-certificates test case</changelog>
  <changelog author="fangxiuning &lt;fangxiuning@huawei.com&gt; - 1:1.1.1m-8" date="1661169600">- fix proformance degradation on aarch64</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-9" date="1663070400">- add provides for openssl-SMx</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 1:1.1.1m-10" date="1666008000">- add sm2 cert and TLCP feature from master</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 1:1.1.1m-11" date="1666353600">- add support for SM2 PKCS7</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 1:1.1.1m-12" date="1666785600">- fix cms testcase</changelog>
  <changelog author="zhujianwei &lt;zhujianwei7@huawei.com&gt; - 1:1.1.1m-13" date="1666958400">- update further expiring certificates</changelog>
  <changelog author="ExtinctFire &lt;shenyining_00@126.com&gt; - 1:1.1.1m-14" date="1666958401">- backport upstream patches</changelog>
  <changelog author="Xu Yizhou &lt;xuyizhou1@huawei.com&gt; - 1:1.1.1m-15" date="1667390400">- add SM3/SM4 optimization</changelog>
  <changelog author="steven &lt;steven_ygui@163.com&gt; - 1:1.1.1m-16" date="1676030400">- fix CVEs</changelog>
</package>
<package pkgid="e28741b3356fc25f6beb662bc6d8ede7c2d408850de2fbacb5e39b8a3290dc4d" name="openssl" arch="src">
  <version epoch="1" ver="1.1.1m" rel="20.oe2203sp1"/>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 1:1.1.1m-11" date="1666353600">- add support for SM2 PKCS7</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 1:1.1.1m-12" date="1666785600">- fix cms testcase</changelog>
  <changelog author="zhujianwei &lt;zhujianwei7@huawei.com&gt; - 1:1.1.1m-13" date="1666958400">- update further expiring certificates</changelog>
  <changelog author="ExtinctFire &lt;shenyining_00@126.com&gt; - 1:1.1.1m-14" date="1666958401">- backport upstream patches</changelog>
  <changelog author="Xu Yizhou &lt;xuyizhou1@huawei.com&gt; - 1:1.1.1m-15" date="1667390400">- add SM3/SM4 optimization</changelog>
  <changelog author="steven &lt;steven_ygui@163.com&gt; - 1:1.1.1m-16" date="1676030400">- fix CVEs</changelog>
  <changelog author="steven &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-17" date="1676980800">- backport some patches</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-18" date="1677240000">- backport some patches</changelog>
  <changelog author="steven &lt;steven_ygui@163.com&gt; - 1:1.1.1m-19" date="1679054400">- backport some patches</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-20" date="1680609600">- fix some CVEs</changelog>
</package>
<package pkgid="f64b89a97e6cdb6c81553e0877ad90f16cb60bcbf20c7ba2bd80578109f6d364" name="openssl" arch="src">
  <version epoch="1" ver="1.1.1m" rel="22.oe2203sp1"/>
  <changelog author="zhujianwei &lt;zhujianwei7@huawei.com&gt; - 1:1.1.1m-13" date="1666958400">- update further expiring certificates</changelog>
  <changelog author="ExtinctFire &lt;shenyining_00@126.com&gt; - 1:1.1.1m-14" date="1666958401">- backport upstream patches</changelog>
  <changelog author="Xu Yizhou &lt;xuyizhou1@huawei.com&gt; - 1:1.1.1m-15" date="1667390400">- add SM3/SM4 optimization</changelog>
  <changelog author="steven &lt;steven_ygui@163.com&gt; - 1:1.1.1m-16" date="1676030400">- fix CVEs</changelog>
  <changelog author="steven &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-17" date="1676980800">- backport some patches</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-18" date="1677240000">- backport some patches</changelog>
  <changelog author="steven &lt;steven_ygui@163.com&gt; - 1:1.1.1m-19" date="1679054400">- backport some patches</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-20" date="1680609600">- fix some CVEs</changelog>
  <changelog author="Xu Yizhou &lt;xuyizhou1@huawei.com&gt; - 1:1.1.1m-21" date="1684152000">- Fix SM4-XTS build failure using clang</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-22" date="1686571200">- fix CVE-2023-2650</changelog>
</package>
<package pkgid="cfb8816d654c5905d0d943cc55596171637b9f70b039d84d79728b8b068b1101" name="openssl" arch="src">
  <version epoch="1" ver="1.1.1m" rel="24.oe2203sp1"/>
  <changelog author="Xu Yizhou &lt;xuyizhou1@huawei.com&gt; - 1:1.1.1m-15" date="1667390400">- add SM3/SM4 optimization</changelog>
  <changelog author="steven &lt;steven_ygui@163.com&gt; - 1:1.1.1m-16" date="1676030400">- fix CVEs</changelog>
  <changelog author="steven &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-17" date="1676980800">- backport some patches</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-18" date="1677240000">- backport some patches</changelog>
  <changelog author="steven &lt;steven_ygui@163.com&gt; - 1:1.1.1m-19" date="1679054400">- backport some patches</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-20" date="1680609600">- fix some CVEs</changelog>
  <changelog author="Xu Yizhou &lt;xuyizhou1@huawei.com&gt; - 1:1.1.1m-21" date="1684152000">- Fix SM4-XTS build failure using clang</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-22" date="1686571200">- fix CVE-2023-2650</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-23" date="1688644800">* backport some patches</changelog>
  <changelog author="zhujianwei &lt;zhujianwei7@huawei.com&gt; - 1:1.1.1m-24" date="1690027200">* fix CVE-2023-3446</changelog>
</package>
<package pkgid="31788b5fca06d24beac1a73963d72663571dc7eab7399505f394d9aa24c574c0" name="openssl" arch="src">
  <version epoch="1" ver="1.1.1m" rel="25.oe2203sp1"/>
  <changelog author="steven &lt;steven_ygui@163.com&gt; - 1:1.1.1m-16" date="1676030400">- fix CVEs</changelog>
  <changelog author="steven &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-17" date="1676980800">- backport some patches</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-18" date="1677240000">- backport some patches</changelog>
  <changelog author="steven &lt;steven_ygui@163.com&gt; - 1:1.1.1m-19" date="1679054400">- backport some patches</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-20" date="1680609600">- fix some CVEs</changelog>
  <changelog author="Xu Yizhou &lt;xuyizhou1@huawei.com&gt; - 1:1.1.1m-21" date="1684152000">- Fix SM4-XTS build failure using clang</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-22" date="1686571200">- fix CVE-2023-2650</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-23" date="1688644800">* backport some patches</changelog>
  <changelog author="zhujianwei &lt;zhujianwei7@huawei.com&gt; - 1:1.1.1m-24" date="1690027200">* fix CVE-2023-3446</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 1:1.1.1m-25" date="1690977600">* fix CVE-2023-3817</changelog>
</package>
<package pkgid="194d955c183f05cd92726e651d9369921c43da26ecc82a91eccbc2b145ab64ed" name="openssl" arch="src">
  <version epoch="1" ver="1.1.1m" rel="29.oe2203sp1"/>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-20" date="1680609600">- fix some CVEs</changelog>
  <changelog author="Xu Yizhou &lt;xuyizhou1@huawei.com&gt; - 1:1.1.1m-21" date="1684152000">- Fix SM4-XTS build failure using clang</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-22" date="1686571200">- fix CVE-2023-2650</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-23" date="1688644800">* backport some patches</changelog>
  <changelog author="zhujianwei &lt;zhujianwei7@huawei.com&gt; - 1:1.1.1m-24" date="1690027200">* fix CVE-2023-3446</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 1:1.1.1m-25" date="1690977600">* fix CVE-2023-3817</changelog>
  <changelog author="reverse-world &lt;ykx1990123@163.com&gt; - 1:1.1.1m-26" date="1694174400">* fix FIPS getenv compatibility problem</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1:1.1.1m-27" date="1694433600">- add loongarch64 and sw_64 support</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 1:1.1.1m-28" date="1695384000">- Backport some upstream patches</changelog>
  <changelog author="fangxiuning &lt;fangxiuning@huawei.com&gt; - 1:1:1.1.1m-29" date="1699963200">- fix CVE-2023-5678</changelog>
</package>
<package pkgid="adf675bfb5411150d7d5376c2dc588fdf53d76fd39a9bc57805b314fbceddc48" name="openssl" arch="src">
  <version epoch="1" ver="1.1.1m" rel="32.oe2203sp1"/>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-23" date="1688644800">* backport some patches</changelog>
  <changelog author="zhujianwei &lt;zhujianwei7@huawei.com&gt; - 1:1.1.1m-24" date="1690027200">* fix CVE-2023-3446</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 1:1.1.1m-25" date="1690977600">* fix CVE-2023-3817</changelog>
  <changelog author="reverse-world &lt;ykx1990123@163.com&gt; - 1:1.1.1m-26" date="1694174400">* fix FIPS getenv compatibility problem</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1:1.1.1m-27" date="1694433600">- add loongarch64 and sw_64 support</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 1:1.1.1m-28" date="1695384000">- Backport some upstream patches</changelog>
  <changelog author="fangxiuning &lt;fangxiuning@huawei.com&gt; - 1:1:1.1.1m-29" date="1699963200">- fix CVE-2023-5678</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-30" date="1702900800">- backport some patches</changelog>
  <changelog author="lixiao &lt;lixiao57@huawei.com&gt; - 1:1.1.1m-31" date="1706616000">- Fix CVE-2024-0727 PKCS12 Decoding crashes</changelog>
  <changelog author="lixiao &lt;lixiao57@huawei.com&gt; - 1:1.1.1m-32" date="1707134400">- add openssl-SMx-perl rpm provides</changelog>
</package>
<package pkgid="6bf0189cb860a0c8b8131163a97fa5e0d61e11119827eccf34abb69981124af2" name="openssl" arch="src">
  <version epoch="1" ver="1.1.1m" rel="34.oe2203sp1"/>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 1:1.1.1m-25" date="1690977600">* fix CVE-2023-3817</changelog>
  <changelog author="reverse-world &lt;ykx1990123@163.com&gt; - 1:1.1.1m-26" date="1694174400">* fix FIPS getenv compatibility problem</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1:1.1.1m-27" date="1694433600">- add loongarch64 and sw_64 support</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 1:1.1.1m-28" date="1695384000">- Backport some upstream patches</changelog>
  <changelog author="fangxiuning &lt;fangxiuning@huawei.com&gt; - 1:1:1.1.1m-29" date="1699963200">- fix CVE-2023-5678</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-30" date="1702900800">- backport some patches</changelog>
  <changelog author="lixiao &lt;lixiao57@huawei.com&gt; - 1:1.1.1m-31" date="1706616000">- Fix CVE-2024-0727 PKCS12 Decoding crashes</changelog>
  <changelog author="lixiao &lt;lixiao57@huawei.com&gt; - 1:1.1.1m-32" date="1707134400">- add openssl-SMx-perl rpm provides</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 1:1.1.1m-33" date="1711454400">- fix some bugs</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 1:1.1.1m-34" date="1713355200">- fix CVE-2024-2511</changelog>
</package>
<package pkgid="de9a2599b08fc8100049a823d916fbcd85474259b8a702905fa933cbf2a416fe" name="openssl" arch="src">
  <version epoch="1" ver="1.1.1m" rel="36.oe2203sp1"/>
  <changelog author="reverse-world &lt;ykx1990123@163.com&gt; - 1:1.1.1m-26" date="1694174400">* fix FIPS getenv compatibility problem</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1:1.1.1m-27" date="1694433600">- add loongarch64 and sw_64 support</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 1:1.1.1m-28" date="1695384000">- Backport some upstream patches</changelog>
  <changelog author="fangxiuning &lt;fangxiuning@huawei.com&gt; - 1:1:1.1.1m-29" date="1699963200">- fix CVE-2023-5678</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-30" date="1702900800">- backport some patches</changelog>
  <changelog author="lixiao &lt;lixiao57@huawei.com&gt; - 1:1.1.1m-31" date="1706616000">- Fix CVE-2024-0727 PKCS12 Decoding crashes</changelog>
  <changelog author="lixiao &lt;lixiao57@huawei.com&gt; - 1:1.1.1m-32" date="1707134400">- add openssl-SMx-perl rpm provides</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 1:1.1.1m-33" date="1711454400">- fix some bugs</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 1:1.1.1m-34" date="1713355200">- fix CVE-2024-2511</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-36" date="1717416000">- fix CVE-2024-4741</changelog>
</package>
<package pkgid="036a2d34b98bb57c8a5eb477ef1e41062b82d1770c01bd26fc12a42bf0ab0dc2" name="openssl" arch="src">
  <version epoch="1" ver="1.1.1m" rel="37.oe2203sp1"/>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1:1.1.1m-27" date="1694433600">- add loongarch64 and sw_64 support</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 1:1.1.1m-28" date="1695384000">- Backport some upstream patches</changelog>
  <changelog author="fangxiuning &lt;fangxiuning@huawei.com&gt; - 1:1:1.1.1m-29" date="1699963200">- fix CVE-2023-5678</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-30" date="1702900800">- backport some patches</changelog>
  <changelog author="lixiao &lt;lixiao57@huawei.com&gt; - 1:1.1.1m-31" date="1706616000">- Fix CVE-2024-0727 PKCS12 Decoding crashes</changelog>
  <changelog author="lixiao &lt;lixiao57@huawei.com&gt; - 1:1.1.1m-32" date="1707134400">- add openssl-SMx-perl rpm provides</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 1:1.1.1m-33" date="1711454400">- fix some bugs</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 1:1.1.1m-34" date="1713355200">- fix CVE-2024-2511</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1m-36" date="1717416000">- fix CVE-2024-4741</changelog>
  <changelog author="gengqihu &lt;gengqihu2@h-partners.com&gt; - 1:1.1.1m-37" date="1719921600">- fix CVE-2024-5535</changelog>
</package>
<package pkgid="9edd3225297765d04665b2a70a1b0261738a20140fb2020587421552e7ac1d7c" name="openvpn" arch="src">
  <version epoch="0" ver="2.5.5" rel="3.oe2203sp1"/>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 2.5.5-3" date="1720526400">- Fix CVE-2024-28882</changelog>
</package>
<package pkgid="b112680108657f61e1f7bcbda1b7cc8a3f78e8cb13eb23caefdb43440f67ad8b" name="openvpn" arch="src">
  <version epoch="0" ver="2.5.5" rel="4.oe2203sp1"/>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 2.5.5-3" date="1720526400">- Fix CVE-2024-28882</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.5.5-4" date="1721476800">- Fix CVE-2024-5594</changelog>
</package>
<package pkgid="9d7ca69f806a700e992e2c601a183f014c6a8241654bf6f7e32866ec7abc291a" name="openvswitch" arch="src">
  <version epoch="0" ver="2.12.4" rel="2.oe2203sp1"/>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 2.12.0-15" date="1617105600">- fix CVE-2020-27827 and CVE-2015-8011</changelog>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 2.12.0-16" date="1627560000">- Type:cve
- ID:CVE-2021-36980 
- SUG:NA
- DESC: fix CVE-2021-36980</changelog>
  <changelog author="huangtianhua &lt;huangtianhua@huawei.com&gt; - 2.12.0-17" date="1627992000">- Adds python3-ovs as provide</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 2.12.0-18" date="1630497600">- Change the OVS startup mode to service startup.</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 2.12.0-19" date="1630584000">- Fix selinux preventing ovs-kmod-ctl err</changelog>
  <changelog author="jiangxinyu &lt;jiangxinyu@kylinos.cn&gt; - 2.12.0-20" date="1652875200">- Add ovn-central ovn-central and ovn-host subpackage</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-pattners.com&gt; - 2.12.0-21" date="1657713600">- fix CVE-2021-3905</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-pattners.com&gt; - 2.12.0-22" date="1658750400">- revent "Add ovn-central ovn-central and ovn-host subpackage"</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-pattners.com&gt; - 2.12.4-1" date="1664366400">- upgrade to 2.12.4</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-pattners.com&gt; - 2.12.4-2" date="1672315200">- fix CVE-2022-4338</changelog>
</package>
<package pkgid="82a7f0d4b5211d22a260fd857970e027dfc1ce010cf543e0a348e720dd2853b2" name="openvswitch" arch="src">
  <version epoch="0" ver="2.12.4" rel="3.oe2203sp1"/>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 2.12.0-16" date="1627560000">- Type:cve
- ID:CVE-2021-36980 
- SUG:NA
- DESC: fix CVE-2021-36980</changelog>
  <changelog author="huangtianhua &lt;huangtianhua@huawei.com&gt; - 2.12.0-17" date="1627992000">- Adds python3-ovs as provide</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 2.12.0-18" date="1630497600">- Change the OVS startup mode to service startup.</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 2.12.0-19" date="1630584000">- Fix selinux preventing ovs-kmod-ctl err</changelog>
  <changelog author="jiangxinyu &lt;jiangxinyu@kylinos.cn&gt; - 2.12.0-20" date="1652875200">- Add ovn-central ovn-central and ovn-host subpackage</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-pattners.com&gt; - 2.12.0-21" date="1657713600">- fix CVE-2021-3905</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-pattners.com&gt; - 2.12.0-22" date="1658750400">- revent "Add ovn-central ovn-central and ovn-host subpackage"</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-pattners.com&gt; - 2.12.4-1" date="1664366400">- upgrade to 2.12.4</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-pattners.com&gt; - 2.12.4-2" date="1672315200">- fix CVE-2022-4338</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-pattners.com&gt; - 2.12.4-3" date="1681387200">- fix CVE-2023-1668</changelog>
</package>
<package pkgid="9d18bedb55692071799b5a1a6e807a30a77b9b23dbeee0c072caca1b1a50e7cb" name="openvswitch" arch="src">
  <version epoch="0" ver="2.12.4" rel="5.oe2203sp1"/>
  <changelog author="jiangxinyu &lt;jiangxinyu@kylinos.cn&gt; - 2.12.0-20" date="1652875200">- Add ovn-central ovn-central and ovn-host subpackage</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-pattners.com&gt; - 2.12.0-21" date="1657713600">- fix CVE-2021-3905</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-pattners.com&gt; - 2.12.0-22" date="1658750400">- revent "Add ovn-central ovn-central and ovn-host subpackage"</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-pattners.com&gt; - 2.12.4-1" date="1664366400">- upgrade to 2.12.4</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-pattners.com&gt; - 2.12.4-2" date="1672315200">- fix CVE-2022-4338</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-pattners.com&gt; - 2.12.4-3" date="1681387200">- fix CVE-2023-1668</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 2.12.4-4" date="1692360000">- add loongarch64 and sw_64 support</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 2.12.4-5" date="1696680000">- fix CVE-2023-5366</changelog>
</package>
<package pkgid="5080fd898c49b19e44caf88292ac19d9fa68905691face45b2781a13419b94ee" name="openvswitch" arch="src">
  <version epoch="0" ver="2.12.4" rel="7.oe2203sp1"/>
  <changelog author="jiangxinyu &lt;jiangxinyu@kylinos.cn&gt; - 2.12.0-20" date="1652875200">- Add ovn-central ovn-central and ovn-host subpackage</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-pattners.com&gt; - 2.12.0-21" date="1657713600">- fix CVE-2021-3905</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-pattners.com&gt; - 2.12.0-22" date="1658750400">- revent "Add ovn-central ovn-central and ovn-host subpackage"</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-pattners.com&gt; - 2.12.4-1" date="1664366400">- upgrade to 2.12.4</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-pattners.com&gt; - 2.12.4-2" date="1672315200">- fix CVE-2022-4338</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-pattners.com&gt; - 2.12.4-3" date="1681387200">- fix CVE-2023-1668</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 2.12.4-4" date="1692360000">- add loongarch64 and sw_64 support</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 2.12.4-5" date="1696680000">- fix CVE-2023-5366</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 2.12.4-6" date="1702555200">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:fix file conflicts</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-pattners.com&gt; - 2.12.4-7" date="1708430400">- fix CVE-2023-3966</changelog>
</package>
<package pkgid="fe886c701a088da8f75ac23f36e7a7a4ade297976303548d4de587cef7aea6ec" name="openvswitch" arch="src">
  <version epoch="0" ver="2.12.4" rel="8.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-pattners.com&gt; - 2.12.0-21" date="1657713600">- fix CVE-2021-3905</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-pattners.com&gt; - 2.12.0-22" date="1658750400">- revent "Add ovn-central ovn-central and ovn-host subpackage"</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-pattners.com&gt; - 2.12.4-1" date="1664366400">- upgrade to 2.12.4</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-pattners.com&gt; - 2.12.4-2" date="1672315200">- fix CVE-2022-4338</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-pattners.com&gt; - 2.12.4-3" date="1681387200">- fix CVE-2023-1668</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 2.12.4-4" date="1692360000">- add loongarch64 and sw_64 support</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 2.12.4-5" date="1696680000">- fix CVE-2023-5366</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 2.12.4-6" date="1702555200">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:fix file conflicts</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-pattners.com&gt; - 2.12.4-7" date="1708430400">- fix CVE-2023-3966</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 2.12.4-8" date="1711713600">- Type:CVE
- Id:CVE-2022-2639
- SUG:NA
- DESC:fix CVE-2022-2639</changelog>
</package>
<package pkgid="238b5c0ee48c6ee861e10628a81b5e2e059219eaea426d04c29d78c467fa5b73" name="optipng" arch="src">
  <version epoch="0" ver="0.7.8" rel="1.oe2203sp1"/>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 0.7.8-1" date="1700827200">- Upgrade to 0.7.8 for fix CVE-2023-43907</changelog>
</package>
<package pkgid="714958c5f88b2611f245204cc77da7995db58bdba0cfbf588806587bf01e519d" name="opusfile" arch="src">
  <version epoch="0" ver="0.11" rel="5.oe2203sp1"/>
  <changelog author="zhaoyao&lt;zhaoyao32@huawei.com&gt; - 0.11-4" date="1622635200">- fixs faileds: /bin/sh: gcc: command not found.</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 0.11-5" date="1674993600">- Fix CVE-2022-47021</changelog>
</package>
<package pkgid="617327d708a486bd454c109ff2817cc8d98ed6178b97c2d78c2033bb68520b27" name="orc" arch="src">
  <version epoch="0" ver="0.4.32" rel="3.oe2203sp1"/>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 0.4.32-2" date="1666699200">- Rebuild for next release</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 0.4.32-3" date="1722513600">- fix CVE-2024-40897</changelog>
</package>
<package pkgid="bee8481310bed27786a3497af11b27409354ef15a3642ed480d2748553d9a128" name="os-maven-plugin" arch="src">
  <version epoch="0" ver="1.2.3" rel="3.oe2203sp1"/>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 1.2.3-2" date="1709812800">- fix the architecture cannot be identified causes failure</changelog>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 1.2.3-3" date="1710417600">- add loongarch64 and RISC-V support</changelog>
</package>
<package pkgid="013c173e0b55f386d10d46cca5a5d45d34269fbd92aafd0b187193ab1b35c69f" name="osc" arch="src">
  <version epoch="0" ver="0.177.0" rel="2.oe2203sp1"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 0.177.0-2" date="1725969600">- Fix CVE-2024-22034</changelog>
</package>
<package pkgid="7c990f7860d7f2de0ce48b1cab7630d3a1e23b7dc232cb5549a120d593809e3d" name="p7zip" arch="src">
  <version epoch="0" ver="16.02" rel="6.oe2203sp1"/>
  <changelog author="chenchen &lt;chen_aka_jan@163.com&gt; - 16.02-5" date="1686052800">- add PIE compiler options</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 16.02-6" date="1725105600">- use correct build flags</changelog>
</package>
<package pkgid="11ee0a6d80c7180e9a7f37fa0372829d1160a5a94962fcba3b8128086b2a29d5" name="pam" arch="src">
  <version epoch="0" ver="1.5.2" rel="6.oe2203sp1"/>
  <changelog author="shangyibin &lt;shangyibin1@huawei.com&gt; - 1.5.1-2" date="1625832000">- use gdbm</changelog>
  <changelog author="shixuantong &lt;shixuantong@huawei.com&gt; - 1.5.1-3" date="1626350400">- remove unnecessary dependency packages from the spec file</changelog>
  <changelog author="chenyaqiang &lt;chenyaqiang@huawei.com&gt; - 1.5.1-4" date="1631707200">- bugfix with cannot open database file</changelog>
  <changelog author="yuanxin &lt;yuanxin24@huawei.com&gt; - 1.5.2-1" date="1640606400">- update version to 1.5.2</changelog>
  <changelog author="fangxiuning &lt;fangxiuning@huawei.com&gt; - 1.5.2-2" date="1642161600">- add sm3 crypt support</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 1.5.2-3" date="1669377600">- modify the patch name for the problem of vendor hard code</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 1.5.2-4" date="1670846400">- Change Chinese translation</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 1.5.2-6" date="1678363200">- revert: bugfix with cannot open database file</changelog>
</package>
<package pkgid="703f4aa962f948e6c36d35af0cc21b4721fc6cdfc521ea33747384c3d6c0e2d0" name="pam" arch="src">
  <version epoch="0" ver="1.5.2" rel="7.oe2203sp1"/>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 1.5.2-3" date="1669377600">- modify the patch name for the problem of vendor hard code</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 1.5.2-4" date="1670846400">- Change Chinese translation</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 1.5.2-6" date="1678363200">- revert: bugfix with cannot open database file</changelog>
  <changelog author="zhangruifang &lt;zhangruifang1@h-partners.com&gt; - 1.5.2-7" date="1706097600">- fix CVE-2024-22365</changelog>
</package>
<package pkgid="0d38c0341f6fd990dcd291d23e947811f9e9412a93569e971dfa799778b00250" name="pam" arch="src">
  <version epoch="0" ver="1.5.2" rel="8.oe2203sp1"/>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 1.5.2-3" date="1669377600">- modify the patch name for the problem of vendor hard code</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 1.5.2-4" date="1670846400">- Change Chinese translation</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 1.5.2-6" date="1678363200">- revert: bugfix with cannot open database file</changelog>
  <changelog author="zhangruifang &lt;zhangruifang1@h-partners.com&gt; - 1.5.2-7" date="1706097600">- fix CVE-2024-22365</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 1.5.2-8" date="1715256000">- remove redundant /var/log/tallylog file</changelog>
</package>
<package pkgid="446c783d507ecadd1a380e48c6995665122bf53e9e10f655cfa5e176f284fee2" name="papi" arch="src">
  <version epoch="0" ver="5.7.0" rel="1.oe2203sp1"/>
  <changelog author="wujie &lt;wujie@nj.iscas.ac.cn&gt; - 5.6.0-10" date="1643025600">- add support for riscv64 from http://fedora.riscv.rocks/koji/buildinfo?buildID=31200
  Author is David Abdurachmanov &lt;david.abdurachmanov@gmail.com&gt;</changelog>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt; - 5.7.0-1" date="1676289600">- Update to 5.7.0</changelog>
</package>
<package pkgid="565c0a9864952dc6bf3cb06e7cd3eaa9762f58dd082ece4d430d5d7de07ba0c5" name="patchelf" arch="src">
  <version epoch="0" ver="0.16.0" rel="1.oe2203sp1"/>
  <changelog author="konglidong &lt;konglidong@uniontech.com&gt; - 0.13-1" date="1637668800">- package init</changelog>
  <changelog author="liyuxiang &lt;liyuxiang@ncti-gba.cn&gt; - 0.16.0-1" date="1672401600">- update to 0.16.0 to fix CVE-2022-44940</changelog>
</package>
<package pkgid="0cdc2e55835199206839ede554efd29e9a533e5a0708f074b5a5ea2aa72210de" name="pcp" arch="src">
  <version epoch="0" ver="5.3.7" rel="3.oe2203sp1"/>
  <changelog author="wangyong &lt;wangyong187@huawei.com&gt; - 4.1.3-16" date="1628078400">- Fix build error caused by GCC upgrade to GCC-10</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-1" date="1644494400">- Update to 5.3.5</changelog>
  <changelog author="baizhonggui &lt;baizhonggui@huawei.com&gt; - 5.3.5-2" date="1645185600">- Fix systemctl stop failed by removing Wants=pmcd.service from pmlogger.service and pmie.service</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.3.5-3" date="1645876800">- Add requires pcp-zeroconf to pcp-system-tools</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
</package>
<package pkgid="de51a07c6b8a7f34bc666d5a6c71c1f68c862ed1190c8e1bd50191725694a867" name="pcp" arch="src">
  <version epoch="0" ver="5.3.7" rel="4.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-1" date="1666353600">- Update to 5.3.7</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.3.7-2" date="1668686400">- Replace openEuler with vendor macro</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.3.7-3" date="1676289600">- Fix out of range in pcp-mpstat</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.3.7-4" date="1711713600">- Fix CVE-2024-3019</changelog>
</package>
<package pkgid="19a04056eabba58e6369e10878c66fb560cfdeec1d98dfdf7837dc6f22f52311" name="pcre2" arch="src">
  <version epoch="0" ver="10.39" rel="9.oe2203sp1"/>
  <changelog author="wangjie &lt;wangjie375@huawei.com&gt; - 10.39-1" date="1638360000">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:Update pcre2 to 10.39</changelog>
  <changelog author="yangmingtai &lt;yangmingtai@huawei.com&gt; - 10.39-2" date="1653739200">- DESC:fix CVE-2022-1586 and CVE-2022-1587</changelog>
  <changelog author="yangmingtai &lt;yangmingtai@huawei.com&gt; - 10.39-3" date="1666094400">- DESC:sync community patchs</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 10.39-4" date="1667476800">- Add sw64 architecture</changelog>
  <changelog author="zhaozhen &lt;zhaozhen@loongson.cn&gt; - 10.39-5" date="1668427200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:fix build error for loongarch64</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 10.39-6" date="1669464000">- Update the Source0 URL.</changelog>
  <changelog author="yangmingtai &lt;yangmingtai@huawei.com&gt; - 10.39-7" date="1678968000">- DESC:sync community patchs</changelog>
  <changelog author="yangmingtai &lt;yangmingtai@huawei.com&gt; - 10.39-8" date="1687780800">- DESC:sync community patchs</changelog>
  <changelog author="yangmingtai &lt;yangmingtai@huawei.com&gt; - 10.39-9" date="1690804800">- DESC:fix CVE-2022-41409</changelog>
</package>
<package pkgid="1ffb9c662b4a1a0a9b6e91276e092a6848196dc006d487096dfc93afe98bd128" name="perl" arch="src">
  <version epoch="4" ver="5.34.0" rel="10.oe2203sp1"/>
  <changelog author="tianwei&lt;tianwei12@huawei.com&gt; 4:5.34.0-1" date="1640779200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:upgrade version to 5.34.0</changelog>
  <changelog author="tianwei&lt;tianwei12@huawei.com&gt; 4:5.34.0-2" date="1641384000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix perl version required for devel</changelog>
  <changelog author="yuanxin&lt;yuanxin24@h-partners.com&gt; 4:5.34.0-3" date="1645704000">- Type:CVE
- ID:CVE-2021-36770
- SUG:NA
- DESC:fix CVE-2021-36770</changelog>
  <changelog author="tianwei&lt;tianwei@h-partners.com&gt; 4:5.34.0-4" date="1648468800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete low version files</changelog>
  <changelog author="tianwei&lt;tianwei@h-partners.com&gt; 4:5.34.0-5" date="1655812800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete maninfo of Compare and Find packages from perl</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; 4:5.34.0-6" date="1656676800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Add patches that are deleted during the upgrade</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; 4:5.34.0-7" date="1684152000">- fix CVE-2023-31484</changelog>
  <changelog author="yangmingtai &lt;yangmingtai@huawei.com&gt; - 4:5.34.0-8" date="1687780800">- fix CVE-2023-31486</changelog>
  <changelog author="yangmingtai &lt;yangmingtai@huawei.com&gt; - 4:5.34.0-9" date="1692964800">- fix CVE-2022-48522</changelog>
  <changelog author="hongjinghao &lt;hongjinghao@huawei.com&gt; - 4:5.34.0-10" date="1701086400">- fix CVE-2023-47038</changelog>
</package>
<package pkgid="86889d7a7269e5df2b700d21a79aa2acc5fd4e97c77da95795fe9a17b101e6f7" name="perl" arch="src">
  <version epoch="4" ver="5.34.0" rel="12.oe2203sp1"/>
  <changelog author="yuanxin&lt;yuanxin24@h-partners.com&gt; 4:5.34.0-3" date="1645704000">- Type:CVE
- ID:CVE-2021-36770
- SUG:NA
- DESC:fix CVE-2021-36770</changelog>
  <changelog author="tianwei&lt;tianwei@h-partners.com&gt; 4:5.34.0-4" date="1648468800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete low version files</changelog>
  <changelog author="tianwei&lt;tianwei@h-partners.com&gt; 4:5.34.0-5" date="1655812800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete maninfo of Compare and Find packages from perl</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; 4:5.34.0-6" date="1656676800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Add patches that are deleted during the upgrade</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; 4:5.34.0-7" date="1684152000">- fix CVE-2023-31484</changelog>
  <changelog author="yangmingtai &lt;yangmingtai@huawei.com&gt; - 4:5.34.0-8" date="1687780800">- fix CVE-2023-31486</changelog>
  <changelog author="yangmingtai &lt;yangmingtai@huawei.com&gt; - 4:5.34.0-9" date="1692964800">- fix CVE-2022-48522</changelog>
  <changelog author="hongjinghao &lt;hongjinghao@huawei.com&gt; - 4:5.34.0-10" date="1701086400">- fix CVE-2023-47038</changelog>
  <changelog author="hongjinghao &lt;hongjinghao@huawei.com&gt; - 4:5.34.0-11" date="1702036800">- fix CVE-2023-47039</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 4:5.34.0-12" date="1702296000">- Fix CVE-2023-47100</changelog>
</package>
<package pkgid="ff4a995b24bc742fdeeb93a427efbc7f3a712c4936176e2ef19ab721030f1d3f" name="perl" arch="src">
  <version epoch="4" ver="5.34.0" rel="7.oe2203sp1"/>
  <changelog author="liudabo&lt;liudabo1@huawei.com&gt; 4:5.32.0-6" date="1626955200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:deleting gdb build dependency</changelog>
  <changelog author="yuanxin&lt;yuanxin24@huawei.com&gt; 4:5.32.0-7" date="1628078400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:remove other release-related information</changelog>
  <changelog author="yuanxin&lt;yuanxin24@huawei.com&gt; 4:5.32.0-8" date="1628164800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:remove perl-devel from perl</changelog>
  <changelog author="tianwei&lt;tianwei12@huawei.com&gt; 4:5.34.0-1" date="1640779200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:upgrade version to 5.34.0</changelog>
  <changelog author="tianwei&lt;tianwei12@huawei.com&gt; 4:5.34.0-2" date="1641384000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix perl version required for devel</changelog>
  <changelog author="yuanxin&lt;yuanxin24@h-partners.com&gt; 4:5.34.0-3" date="1645704000">- Type:CVE
- ID:CVE-2021-36770
- SUG:NA
- DESC:fix CVE-2021-36770</changelog>
  <changelog author="tianwei&lt;tianwei@h-partners.com&gt; 4:5.34.0-4" date="1648468800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete low version files</changelog>
  <changelog author="tianwei&lt;tianwei@h-partners.com&gt; 4:5.34.0-5" date="1655812800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete maninfo of Compare and Find packages from perl</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; 4:5.34.0-6" date="1656676800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Add patches that are deleted during the upgrade</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; 4:5.34.0-7" date="1684152000">- fix CVE-2023-31484</changelog>
</package>
<package pkgid="da36ea4ddd28da6b2785f24e02757276edfe281ff1a0296d599f855400a2a9f7" name="perl" arch="src">
  <version epoch="4" ver="5.34.0" rel="8.oe2203sp1"/>
  <changelog author="yuanxin&lt;yuanxin24@huawei.com&gt; 4:5.32.0-7" date="1628078400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:remove other release-related information</changelog>
  <changelog author="yuanxin&lt;yuanxin24@huawei.com&gt; 4:5.32.0-8" date="1628164800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:remove perl-devel from perl</changelog>
  <changelog author="tianwei&lt;tianwei12@huawei.com&gt; 4:5.34.0-1" date="1640779200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:upgrade version to 5.34.0</changelog>
  <changelog author="tianwei&lt;tianwei12@huawei.com&gt; 4:5.34.0-2" date="1641384000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix perl version required for devel</changelog>
  <changelog author="yuanxin&lt;yuanxin24@h-partners.com&gt; 4:5.34.0-3" date="1645704000">- Type:CVE
- ID:CVE-2021-36770
- SUG:NA
- DESC:fix CVE-2021-36770</changelog>
  <changelog author="tianwei&lt;tianwei@h-partners.com&gt; 4:5.34.0-4" date="1648468800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete low version files</changelog>
  <changelog author="tianwei&lt;tianwei@h-partners.com&gt; 4:5.34.0-5" date="1655812800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete maninfo of Compare and Find packages from perl</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; 4:5.34.0-6" date="1656676800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Add patches that are deleted during the upgrade</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; 4:5.34.0-7" date="1684152000">- fix CVE-2023-31484</changelog>
  <changelog author="yangmingtai &lt;yangmingtai@huawei.com&gt; - 4:5.34.0-8" date="1687780800">- fix CVE-2023-31486</changelog>
</package>
<package pkgid="aca632c95b2b92eb3b720872fc0cccfe5beb9076e7bc8a6f6c17bae9b45a5e4f" name="perl" arch="src">
  <version epoch="4" ver="5.34.0" rel="9.oe2203sp1"/>
  <changelog author="tianwei&lt;tianwei12@huawei.com&gt; 4:5.34.0-1" date="1640779200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:upgrade version to 5.34.0</changelog>
  <changelog author="tianwei&lt;tianwei12@huawei.com&gt; 4:5.34.0-2" date="1641384000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix perl version required for devel</changelog>
  <changelog author="yuanxin&lt;yuanxin24@h-partners.com&gt; 4:5.34.0-3" date="1645704000">- Type:CVE
- ID:CVE-2021-36770
- SUG:NA
- DESC:fix CVE-2021-36770</changelog>
  <changelog author="tianwei&lt;tianwei@h-partners.com&gt; 4:5.34.0-4" date="1648468800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete low version files</changelog>
  <changelog author="tianwei&lt;tianwei@h-partners.com&gt; 4:5.34.0-5" date="1655812800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete maninfo of Compare and Find packages from perl</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; 4:5.34.0-6" date="1656676800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Add patches that are deleted during the upgrade</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; 4:5.34.0-7" date="1684152000">- fix CVE-2023-31484</changelog>
  <changelog author="yangmingtai &lt;yangmingtai@huawei.com&gt; - 4:5.34.0-8" date="1687780800">- fix CVE-2023-31486</changelog>
  <changelog author="yangmingtai &lt;yangmingtai@huawei.com&gt; - 4:5.34.0-9" date="1692964800">- fix CVE-2022-48522</changelog>
</package>
<package pkgid="c301a5dcbdeb9e584abc8fc149e0ab5ae774d1d70068e2baa4f36f0d48c28647" name="perl-CPAN" arch="src">
  <version epoch="0" ver="2.29" rel="2.oe2203sp1"/>
  <changelog author="tianwei &lt;tianwei12@h-partners.com&gt; - 2.29-1" date="1644494400">- upgrade to 2.29</changelog>
  <changelog author="yanglongkang &lt;yanglongkang@h-partners.com&gt; - 2.29-2" date="1688472000">- fix CVE-2023-31484</changelog>
</package>
<package pkgid="de1d234cc940c1c0e02019e2bbc9b058de0b36aba91a5bcb05ab72af729d7b63" name="perl-HTTP-Tiny" arch="src">
  <version epoch="0" ver="0.080" rel="2.oe2203sp1"/>
  <changelog author="yuanxin &lt;yuanxin24@huawei.com&gt; - 0.080-1" date="1640520000">- update version to 0.080</changelog>
  <changelog author="yangmingtai &lt;yangmingtai@huawei.com&gt; - 0.080-2" date="1687780800">- fix CVE-2023-31486</changelog>
</package>
<package pkgid="73e647d56fac03b2ce077388e7dc3def8e1a8e901a83a30b67028effea8e8064" name="perl-libintl-perl" arch="src">
  <version epoch="0" ver="1.31" rel="3.oe2203sp1"/>
  <changelog author="renhongxun &lt;renhongxun@h-partners.com&gt; - 1.31-2" date="1650974400">- rebuild perl-libintl-perl</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 1.31-3" date="1666699200">- Rebuild for next release</changelog>
</package>
<package pkgid="13f267333aff98cf1a93ec87d89256ec70eca9042a64eed32cb5123997253fb9" name="pesign" arch="src">
  <version epoch="0" ver="115" rel="4.oe2203sp1"/>
  <changelog author="huanghaitao &lt;huanghaitao8@huawei.com&gt; - 0.113-4" date="1622462400">- Completing build dependencies</changelog>
  <changelog author="Shenmei Tu &lt;tushenmei@huawei.com&gt; - 0.113-5" date="1627732800">- remove-superfluous-type-settings.patch</changelog>
  <changelog author="godcansee &lt;liu332084460@foxmail.com&gt; - 0.113-6" date="1665403200">- add feature to support for sm2,sm3</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 0.113-7" date="1667217600">- fix the algorithm flag for sm2,sm3</changelog>
  <changelog author="jinlun &lt;jinlun@huawei.com&gt; - 115-1" date="1667822400">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:update to 115</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 115-2" date="1668254400">- fix certificate chain bug</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 115-3" date="1671451200">- Free resources if certification cannot be found.</changelog>
  <changelog author="luopihui &lt;luopihui@ncti-gba.cn&gt; - 115-4" date="1676376000">- Fix CVE-2022-3560</changelog>
</package>
<package pkgid="20bb90ebd825a9dc45b264fd17042dc9df22fdce6a73cd1e2f9094e7d0b41c88" name="pesign" arch="src">
  <version epoch="0" ver="115" rel="5.oe2203sp1"/>
  <changelog author="huanghaitao &lt;huanghaitao8@huawei.com&gt; - 0.113-4" date="1622462400">- Completing build dependencies</changelog>
  <changelog author="Shenmei Tu &lt;tushenmei@huawei.com&gt; - 0.113-5" date="1627732800">- remove-superfluous-type-settings.patch</changelog>
  <changelog author="godcansee &lt;liu332084460@foxmail.com&gt; - 0.113-6" date="1665403200">- add feature to support for sm2,sm3</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 0.113-7" date="1667217600">- fix the algorithm flag for sm2,sm3</changelog>
  <changelog author="jinlun &lt;jinlun@huawei.com&gt; - 115-1" date="1667822400">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:update to 115</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 115-2" date="1668254400">- fix certificate chain bug</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 115-3" date="1671451200">- Free resources if certification cannot be found.</changelog>
  <changelog author="luopihui &lt;luopihui@ncti-gba.cn&gt; - 115-4" date="1676376000">- Fix CVE-2022-3560</changelog>
  <changelog author="liyanan &lt;thistleslyn@163.com&gt; - 115-5" date="1685534400">- Remove unused i option in authvar</changelog>
</package>
<package pkgid="6bc51100b75bda646f5f07f7d84b41cf3d73bd9dccc4159e8f79fce3c3f54f31" name="php" arch="src">
  <version epoch="0" ver="8.0.28" rel="1.oe2203sp1"/>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 8.0.0-7" date="1639828800">- Fix bugs found by oss-fuzz</changelog>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 8.0.0-8" date="1645617600">- use lmdb instead of Berkeley DB for package dba
- update %configure for riscv
- delete unused rcver</changelog>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 8.0.0-9" date="1646827200">- Fix CVE-2021-21708</changelog>
  <changelog author="Hugel &lt;gengqihu1@h-partners.com&gt; - 8.0.0-10" date="1655553600">- Fix CVE-2022-31625 CVE-2022-31626</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 8.0.24-1" date="1664539200">- update to 8.0.24
- CVE-2022-31628, CVE-2022-31629</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.25-1" date="1667044800">- New version 8.0.25</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 8.0.25-2" date="1667304000">- Add sw64 architecture</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.26-1" date="1669291200">- New version 8.0.26</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.27-1" date="1673870400">- New version 8.0.27
- Fix CVE-2022-31631</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.28-1" date="1676980800">- CVE-2023-0567,CVE-2023-0568,CVE-2023-0662
- update to 8.0.28</changelog>
</package>
<package pkgid="2d91d45131bcb740c773e0f93180d6659a78e7e0486a066c7d99d46f36611a8c" name="php" arch="src">
  <version epoch="0" ver="8.0.30" rel="1.oe2203sp1"/>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 8.0.0-8" date="1645617600">- use lmdb instead of Berkeley DB for package dba
- update %configure for riscv
- delete unused rcver</changelog>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 8.0.0-9" date="1646827200">- Fix CVE-2021-21708</changelog>
  <changelog author="Hugel &lt;gengqihu1@h-partners.com&gt; - 8.0.0-10" date="1655553600">- Fix CVE-2022-31625 CVE-2022-31626</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 8.0.24-1" date="1664539200">- update to 8.0.24
- CVE-2022-31628, CVE-2022-31629</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.25-1" date="1667044800">- New version 8.0.25</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 8.0.25-2" date="1667304000">- Add sw64 architecture</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.26-1" date="1669291200">- New version 8.0.26</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.27-1" date="1673870400">- New version 8.0.27
- Fix CVE-2022-31631</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.28-1" date="1676980800">- CVE-2023-0567,CVE-2023-0568,CVE-2023-0662
- update to 8.0.28</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-1" date="1691150400">- CVE-2023-3823, CVE-2023-3824
- update to 8.0.30</changelog>
</package>
<package pkgid="e526aca7d2c4e826d4f635f7318c3570d89b4c72cfa6da155735d8e0402594cc" name="php" arch="src">
  <version epoch="0" ver="8.0.30" rel="3.oe2203sp1"/>
  <changelog author="Hugel &lt;gengqihu1@h-partners.com&gt; - 8.0.0-10" date="1655553600">- Fix CVE-2022-31625 CVE-2022-31626</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 8.0.24-1" date="1664539200">- update to 8.0.24
- CVE-2022-31628, CVE-2022-31629</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.25-1" date="1667044800">- New version 8.0.25</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 8.0.25-2" date="1667304000">- Add sw64 architecture</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.26-1" date="1669291200">- New version 8.0.26</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.27-1" date="1673870400">- New version 8.0.27
- Fix CVE-2022-31631</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.28-1" date="1676980800">- CVE-2023-0567,CVE-2023-0568,CVE-2023-0662
- update to 8.0.28</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-1" date="1691150400">- CVE-2023-3823, CVE-2023-3824
- update to 8.0.30</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-3" date="1713182400">- fix CVE-2024-2756, CVE-2024-3096</changelog>
</package>
<package pkgid="ea9cd60ee4873f5e1ecbf960afef3c4b13fa4c3135cbea0c94b3b04a6722df16" name="php" arch="src">
  <version epoch="0" ver="8.0.30" rel="4.oe2203sp1"/>
  <changelog author="Hugel &lt;gengqihu1@h-partners.com&gt; - 8.0.0-10" date="1655553600">- Fix CVE-2022-31625 CVE-2022-31626</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 8.0.24-1" date="1664539200">- update to 8.0.24
- CVE-2022-31628, CVE-2022-31629</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.25-1" date="1667044800">- New version 8.0.25</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 8.0.25-2" date="1667304000">- Add sw64 architecture</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.26-1" date="1669291200">- New version 8.0.26</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.27-1" date="1673870400">- New version 8.0.27
- Fix CVE-2022-31631</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.28-1" date="1676980800">- CVE-2023-0567,CVE-2023-0568,CVE-2023-0662
- update to 8.0.28</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-1" date="1691150400">- CVE-2023-3823, CVE-2023-3824
- update to 8.0.30</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-3" date="1713182400">- fix CVE-2024-2756, CVE-2024-3096</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-4" date="1717761600">- fix CVE-2024-5458</changelog>
</package>
<package pkgid="5c567466c78d3b7a8e907f7c1f6018590333760f1880c7c9578a4a3bbddf784a" name="php" arch="src">
  <version epoch="0" ver="8.0.30" rel="5.oe2203sp1"/>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 8.0.24-1" date="1664539200">- update to 8.0.24
- CVE-2022-31628, CVE-2022-31629</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.25-1" date="1667044800">- New version 8.0.25</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 8.0.25-2" date="1667304000">- Add sw64 architecture</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.26-1" date="1669291200">- New version 8.0.26</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.27-1" date="1673870400">- New version 8.0.27
- Fix CVE-2022-31631</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.28-1" date="1676980800">- CVE-2023-0567,CVE-2023-0568,CVE-2023-0662
- update to 8.0.28</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-1" date="1691150400">- CVE-2023-3823, CVE-2023-3824
- update to 8.0.30</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-3" date="1713182400">- fix CVE-2024-2756, CVE-2024-3096</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-4" date="1717761600">- fix CVE-2024-5458</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-5" date="1718193600">- Update licenses declaration</changelog>
</package>
<package pkgid="7629c67fcc7547540b2d641d64b5b419ea6023ca753a99fbe6b26d4f1ec5c2d7" name="pin-gcc-client" arch="src">
  <version epoch="0" ver="0.4.1" rel="5.oe2203sp1"/>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 0.1.0-2" date="1661601600">- Type:Bugfix
- ID:NA
- SUG:NA
- DESC:Static link plg_grpc_proto</changelog>
  <changelog author="wumingchuan &lt;wumingchuan1992@foxmail.com&gt; - 0.2.0-1" date="1664452800">- Type:Update
- ID:NA
- SUG:NA
- DESC:Update to v0.2.0</changelog>
  <changelog author="wumingchuan &lt;wumingchuan1992@foxmail.com&gt; - 0.3.0-1" date="1669896000">- Type:Update
- ID:NA
- SUG:NA
- DESC:Update to v0.3.0</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 0.3.0-2" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openEuler/pin-gcc-client</changelog>
  <changelog author="zhaowenyu &lt;804544223@qq.com&gt; - 0.4.0-1" date="1671537600">- Type:Update
- ID:NA
- SUG:NA
- DESC:Update to v0.4.0</changelog>
  <changelog author="dingguangya &lt;dingguangya1@huawei.com&gt; - 0.4.1-1" date="1677412800">- Type:Update
- ID:NA
- SUG:NA
- DESC:Update to v0.4.1</changelog>
  <changelog author="wumingchuan &lt;wumingchuan1992@foxmail.com&gt; - 0.4.1-2" date="1677844800">- Type:Update
- ID:NA
- SUG:NA
- DESC: Fix STRIP &amp; RPATH</changelog>
  <changelog author="wumingchuan &lt;wumingchuan1992@foxmail.com&gt; - 0.4.1-3" date="1678104000">- Type:Update
- ID:NA
- SUG:NA
- DESC: Fix RPATH problem by ld.so.conf.d</changelog>
  <changelog author="dingguangya &lt;dingguangya1@huawei.com&gt; - 0.4.1-4" date="1678190400">- Type:Update
- ID:NA
- SUG:NA
- DESC:Sync patch from openEuler/pin-gcc-client</changelog>
  <changelog author="dingguangya &lt;dingguangya1@huawei.com&gt; - 0.4.1-5" date="1679054400">- Type:Update
- ID:NA
- SUG:NA
- DESC:Fix VectorType CallOp TreeTOValue</changelog>
</package>
<package pkgid="9a28037f5c1a56a6e6d2d545d86fe936e3e7df4aa55b063a4b1b6252fc078e8d" name="pin-gcc-client" arch="src">
  <version epoch="0" ver="0.4.1" rel="6.oe2203sp1"/>
</package>
<package pkgid="32378b05013c179f0612a17f80c02f4d6bc1af12fe78ed4a3bead960b6bc7316" name="pin-server" arch="src">
  <version epoch="0" ver="0.4.0" rel="8.oe2203sp1"/>
  <changelog author="wumingchuan &lt;wumingchuan1992@foxmail.com&gt; - 0.3.0-1" date="1669896000">- Type:Update
- ID:NA
- SUG:NA
- DESC:Update to v0.3.0</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 0.3.0-2" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openEuler/pin-server</changelog>
  <changelog author="zhaowenyu &lt;804544223@qq.com&gt; - 0.4.0-1" date="1671537600">- Type:Update
- ID:NA
- SUG:NA
- DESC:Update to v0.4.0</changelog>
  <changelog author="dingguangya &lt;dingguangya1@huawei.com&gt; - 0.4.0-2" date="1677067200">- Type:Update
- ID:NA
- SUG:NA
- DESC:Sync patch from openEuler/pin-server</changelog>
  <changelog author="dingguangya &lt;dingguangya1@huawei.com&gt; - 0.4.0-3" date="1677412800">- Type:Update
- ID:NA
- SUG:NA
- DESC:Sync patch from openEuler/pin-server</changelog>
  <changelog author="wumingchuan &lt;wumingchuan1992@foxmail.com&gt; - 0.4.0-4" date="1677844800">- Type:Update
- ID:NA
- SUG:NA
- DESC: Fix STRIP &amp; RPATH</changelog>
  <changelog author="wumingchuan &lt;wumingchuan1992@foxmail.com&gt; - 0.4.0-5" date="1678104000">- Type:Update
- ID:NA
- SUG:NA
- DESC: Fix RPATH problem by ld.so.conf.d</changelog>
  <changelog author="dingguangya &lt;dingguangya1@huawei.com&gt; - 0.4.0-6" date="1678190400">- Type:Update
- ID:NA
- SUG:NA
- DESC:Sync patch from openEuler/pin-server</changelog>
  <changelog author="dingguangya &lt;dingguangya1@huawei.com&gt; - 0.4.0-7" date="1679054400">- Type:Update
- ID:NA
- SUG:NA
- DESC:Fix VectorType and Fix Pass DoOptimize method</changelog>
  <changelog author="dingguangya &lt;dingguangya1@huawei.com&gt; - 0.4.0-8" date="1679400000">- Type:Update
- ID:NA
- SUG:NA
- DESC:Fix log output form</changelog>
</package>
<package pkgid="fccc960f76ff3545f9a2583ed692cd55e9bdc70397698e308780eabcd06b376a" name="pkgconf" arch="src">
  <version epoch="0" ver="1.8.0" rel="3.oe2203sp1"/>
  <changelog author="tianwei &lt;tianwei12@huawei.com&gt; - 1.8.0-1" date="1640433600">- Type: NA
- ID: NA
- SUG: NA
- DESC:upgrade version to 1.8.0</changelog>
  <changelog author="shixuantong &lt;shixuantong@h-partners.com&gt; - 1.8.0-2" date="1651752000">- Type: NA
- ID: NA
- SUG: NA
- DESC:fix changelog error</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 1.8.0-3" date="1674993600">- fix CVE-2023-24056</changelog>
</package>
<package pkgid="b8f2dad2961d8bd4b70344f1f46750fdb061db064a10bfa28d61a72f12aa4861" name="pmix" arch="src">
  <version epoch="0" ver="4.2.6" rel="1.oe2203sp1"/>
  <changelog author="caodongxia &lt;caodongxia@huawei.com&gt; - 3.1.4-3" date="1631966400">- Correct the help information</changelog>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt; - 4.1.2-1" date="1652961600">- Update to 4.1.2</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 4.2.6-1" date="1695038400">- Update to 4.2.6 for fix CVE-2023-41915</changelog>
</package>
<package pkgid="c78e57bc8eb902d9b2daf05480646ff59e5e21e562a508a0309d8532831bd125" name="poppler" arch="src">
  <version epoch="0" ver="0.90.0" rel="4.oe2203sp1"/>
  <changelog author="chenyanpanHW &lt;chenyanpan@huawei.com&gt; - 0.67.0-8" date="1627646400">- DESC: delete -S git from 
%setup       -q



/usr/bin/cat /home/lkp/rpmbuild/SOURCES/poppler-0.30.0-rotated-words-selection.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/poppler-0.73.0-PSOutputDev-buffer-read.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/poppler-0.84.0-MacroPushRequiredVars.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/poppler-0.90.0-position-independent-code.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/poppler-gcc11.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/backport-CVE-2022-38784.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/backport-CVE-2022-27337.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

, and delete BuildRequires git</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 0.67.0-9" date="1632830400">- Type:cves
- Id:NA
- SUG:NA
- DESC:fix CVE-2019-12293 CVE-2020-27778</changelog>
  <changelog author="yangcheng &lt;yangcheng87@huawei.com&gt; - 0.67.0-10" date="1632916800">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:Modify the patch number</changelog>
  <changelog author="xu_ping &lt;xuping33@huawei.com&gt; - 0.90.0-1" date="1640952000">- update to 0.90.0</changelog>
  <changelog author="xu_ping &lt;xuping33@huawei.com&gt; - 0.90.0-2" date="1642507200">- Add BuildRequires openjpeg2-tools to fix "/usr/bin/opj2_decompress" not found</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.90.0-3" date="1662465600">- fix CVE-2022-38784</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.90.0-4" date="1678795200">- fix CVE-2022-37337</changelog>
</package>
<package pkgid="94dafa58ea8525883e3dbe2bbd975acc3ecec2ad387e256efc6384f803c47cf0" name="poppler" arch="src">
  <version epoch="0" ver="0.90.0" rel="6.oe2203sp1"/>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 0.67.0-9" date="1632830400">- Type:cves
- Id:NA
- SUG:NA
- DESC:fix CVE-2019-12293 CVE-2020-27778</changelog>
  <changelog author="yangcheng &lt;yangcheng87@huawei.com&gt; - 0.67.0-10" date="1632916800">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:Modify the patch number</changelog>
  <changelog author="xu_ping &lt;xuping33@huawei.com&gt; - 0.90.0-1" date="1640952000">- update to 0.90.0</changelog>
  <changelog author="xu_ping &lt;xuping33@huawei.com&gt; - 0.90.0-2" date="1642507200">- Add BuildRequires openjpeg2-tools to fix "/usr/bin/opj2_decompress" not found</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.90.0-3" date="1662465600">- fix CVE-2022-38784</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.90.0-4" date="1678795200">- fix CVE-2022-27337</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.90.0-5" date="1685016000">- fix changelog error</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.90.0-6" date="1693396800">- fix CVE-2022-37050,CVE-2022-37051,CVE-2022-37052,CVE-2022-38349,CVE-2020-23804
- fix install error</changelog>
</package>
<package pkgid="5963a53b91e809716eec2371e42b6d6145b5b2400d0465e9de00f34443108621" name="poppler" arch="src">
  <version epoch="0" ver="0.90.0" rel="8.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.90.0-3" date="1662465600">- fix CVE-2022-38784</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.90.0-4" date="1678795200">- fix CVE-2022-27337</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.90.0-5" date="1685016000">- fix changelog error</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.90.0-6" date="1693396800">- fix CVE-2022-37050,CVE-2022-37051,CVE-2022-37052,CVE-2022-38349,CVE-2020-23804
- fix install error</changelog>
  <changelog author="xiongyi &lt;xiongyi@uniontech.com&gt; - 0.90.0-7" date="1701259200">- fix CVE-2020-36023
- fix infinite looping in cvtGlyph with broken files
- patch source:https://gitlab.freedesktop.org/poppler/poppler/-/issues/1013</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 0.90.0-8" date="1719316800">- Type:CVE
- CVE:CVE-2024-6239
- SUG:NA
- DESC:fix CVE-2024-6239</changelog>
</package>
<package pkgid="85167a61f7deb15dc281173557f09a637eba8656900acf95e4befddfe97e1e12" name="postfix" arch="src">
  <version epoch="2" ver="3.3.1" rel="20.oe2203sp1"/>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 2:3.3.1-13" date="1627646400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix build error with gcc 10</changelog>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 2:3.3.1-14" date="1628596800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix build error with glibc 2.34</changelog>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 2:3.3.1-15" date="1631016000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:remove runpath of files</changelog>
  <changelog author="xihaochen&lt;xihaochen@h-partner.com&gt; - 2:3.3.1-16" date="1645617600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:remove libdb dependency</changelog>
  <changelog author="zhouyihang&lt;zhouyihang3@h-partners.com&gt; - 2:3.3.1-17" date="1646136000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add build require of lmdb</changelog>
  <changelog author="zhujunhao&lt;zhujunhao11@huawei.com&gt; - 2:3.3.1-18" date="1646136001">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:set lmdb db in main.cf</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 2:3.3.1-19" date="1646308800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:set default_data_tpye to lmdb</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 2:3.3.1-20" date="1678449600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:modify Certificate validity period</changelog>
</package>
<package pkgid="c44bc70a70cf31046dd80b4d5d8bcdbe7f74c388bdaf9ea70a958808838f0293" name="postgresql" arch="src">
  <version epoch="0" ver="13.12" rel="2.oe2203sp1"/>
  <changelog author="lvxiaoqian&lt;xiaoqian@nj.iscas.ac.cn&gt; - 13.3-4" date="1642507200">- Disable spinlocks on RISC-V 64-bit (riscv64)
- Disable LLVM/Clang for riscv64 (fails tests)</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 13.3-5" date="1647000000">- Fix CVE-2021-23214 CVE-2021-23222</changelog>
  <changelog author="bzhaoop &lt;bzhaojyathousandy@gmail.com&gt; - 13.3-6" date="1659355200">- Porting "Fix subtransaction test failed" from master branch
- Fri May 6 2022 caodongxia &lt;caodongxia@h-partners.com&gt; - 13.3-4
- sync the same line with master</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 13.3-7" date="1666699200">- Add sw64 architecture</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 13.3-8" date="1686312000">- Fix build error for loongarch64
- Fix issue: confilct between libpq-devel and postgresql-devel
- guess init spec from redhat
- change redhat spec:rm private package and add files to server-devel
- so add delete lines to Fix issue
- Next: write oe libpq and postgresql spec by myself</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 13.12-1" date="1691755200">- New version 13.12</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 13.12-2" date="1692273600">- fix sw_64 patch error and remove --no-discard-stderr</changelog>
</package>
<package pkgid="4136f245a0e30ac4dcdb5a17960d0827c762d5012f1d0a23a81d8a4bc7c1eb30" name="postgresql" arch="src">
  <version epoch="0" ver="13.16" rel="1.oe2203sp1"/>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 13.3-7" date="1666699200">- Add sw64 architecture</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 13.3-8" date="1686312000">- Fix build error for loongarch64
- Fix issue: confilct between libpq-devel and postgresql-devel
- guess init spec from redhat
- change redhat spec:rm private package and add files to server-devel
- so add delete lines to Fix issue
- Next: write oe libpq and postgresql spec by myself</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 13.12-1" date="1691755200">- New version 13.12</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 13.12-2" date="1692273600">- fix sw_64 patch error and remove --no-discard-stderr</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 13.13-1" date="1700049600">- New version 13.13
- Fix CVE-2023-5868  CVE-2023-5869  CVE-2023-5870</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 13.16-1" date="1723204800">- New version 13.16 (CVE-2024-7348)</changelog>
</package>
<package pkgid="de4a1cd10cc6fea8b762a466a9bb9cae34d9f450de219d0f85d6b7a399c6d00d" name="postgresql-jdbc" arch="src">
  <version epoch="0" ver="42.4.1" rel="2.oe2203sp1"/>
  <changelog author="houyingchao &lt;houyingchao@huawei.com&gt; - 42.2.25-1" date="1645012800">- Upgrade to 42.2.25
- Fix CVE-2022-21724</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 42.4.1-1" date="1660046400">- Update to 42.4.1 to fix CVE-2022-31197</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 42.4.1-2" date="1686916800">- Fix CVE-2022-41946</changelog>
</package>
<package pkgid="6ebd74dd83aa3d01c5ce41e2f9ead10e200558ea7f050a374e5ce6bcc050e191" name="postgresql-jdbc" arch="src">
  <version epoch="0" ver="42.4.1" rel="3.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 42.4.1-1" date="1660046400">- Update to 42.4.1 to fix CVE-2022-31197</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 42.4.1-2" date="1686916800">- Fix CVE-2022-41946</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 42.4.1-3" date="1708948800">- Fix CVE-2024-1597</changelog>
</package>
<package pkgid="d76be53a63843f1545bc777151e5a1ab8f954ed01c740ffc010a99b855acce41" name="ppp" arch="src">
  <version epoch="0" ver="2.4.9" rel="3.oe2203sp1"/>
  <changelog author="yanglu &lt;yanglu72@huawei.com&gt; - 2.4.9-1" date="1638878400">- Type:requirement
- ID:NA
- SUG:NA
- DESC:update ppp version from 2.4.8 to 2.4.9</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 2.4.9-2" date="1666180800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:pppd: Negotiate IP address when only peer addresses are provided</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 2.4.9-3" date="1672315200">- Type:cves
- ID:NA
- SUG:NA
- DESC:fix CVE-2022-4603</changelog>
</package>
<package pkgid="dee3009f4c2e8df2f72106a07960dcc49999b57ae0c9b8de1d2b7f3834a6910e" name="procps-ng" arch="src">
  <version epoch="0" ver="4.0.2" rel="10.oe2203sp1"/>
  <changelog author="Qiang Wei &lt;qiang.wei@suse.com&gt; - 4.0.2-1" date="1675252800">- Update to 4.0.2.</changelog>
  <changelog author="zhoujie &lt;zhoujie133@huawei.com&gt; - 4.0.2-2" date="1679745600">- top: top address the missing guest tics for summary area</changelog>
  <changelog author="zhoujie &lt;zhoujie133@huawei.com&gt; - 4.0.2-3" date="1685448000">- ps: fix ps -lm dump problem</changelog>
  <changelog author="zhoujie &lt;zhoujie133@huawei.com&gt; - 4.0.2-4" date="1686657600">- top: first time display delay</changelog>
  <changelog author="zhoujie &lt;zhoujie133@huawei.com&gt; - 4.0.2-5" date="1687780800">- pmap: increase memory allocation failure judgment</changelog>
  <changelog author="zhoujie &lt;zhoujie133@huawei.com&gt; - 4.0.2-6" date="1687953600">- top: added guest tics when multiple cpus were merged</changelog>
  <changelog author="Xi Fnegfei &lt;xi.fengfei@h3c.com&gt; - 4.0.2-7" date="1689076800">- library: restore the proper main thread tics valuation</changelog>
  <changelog author="zhoujie &lt;zhoujie133@huawei.com&gt; - 4.0.2-8" date="1689163200">- vmstat: Update memory statistics</changelog>
  <changelog author="zhoujie &lt;zhoujie133@huawei.com&gt; - 4.0.2-9" date="1689249600">- vmstat: print guest time</changelog>
  <changelog author="Liu Chao &lt;liuchao173@huawei.com&gt; - 4.0.2-10" date="1692100800">- ps: Fix possible buffer overflow in -C option</changelog>
</package>
<package pkgid="6f2acf39172f7ab4f89cabd20eb3f798aeb1e3b22b46d8263deda6b36ffeb508" name="procps-ng" arch="src">
  <version epoch="0" ver="4.0.2" rel="11.oe2203sp1"/>
  <changelog author="zhoujie &lt;zhoujie133@huawei.com&gt; - 4.0.2-2" date="1679745600">- top: top address the missing guest tics for summary area</changelog>
  <changelog author="zhoujie &lt;zhoujie133@huawei.com&gt; - 4.0.2-3" date="1685448000">- ps: fix ps -lm dump problem</changelog>
  <changelog author="zhoujie &lt;zhoujie133@huawei.com&gt; - 4.0.2-4" date="1686657600">- top: first time display delay</changelog>
  <changelog author="zhoujie &lt;zhoujie133@huawei.com&gt; - 4.0.2-5" date="1687780800">- pmap: increase memory allocation failure judgment</changelog>
  <changelog author="zhoujie &lt;zhoujie133@huawei.com&gt; - 4.0.2-6" date="1687953600">- top: added guest tics when multiple cpus were merged</changelog>
  <changelog author="Xi Fnegfei &lt;xi.fengfei@h3c.com&gt; - 4.0.2-7" date="1689076800">- library: restore the proper main thread tics valuation</changelog>
  <changelog author="zhoujie &lt;zhoujie133@huawei.com&gt; - 4.0.2-8" date="1689163200">- vmstat: Update memory statistics</changelog>
  <changelog author="zhoujie &lt;zhoujie133@huawei.com&gt; - 4.0.2-9" date="1689249600">- vmstat: print guest time</changelog>
  <changelog author="Liu Chao &lt;liuchao173@huawei.com&gt; - 4.0.2-10" date="1692100800">- ps: Fix possible buffer overflow in -C option</changelog>
  <changelog author="Weifeng Su &lt;suweifeng1@huawei.com&gt; - 4.0.2-11" date="1711713600">- backport patch to Correct BSD c option issue</changelog>
</package>
<package pkgid="78c328e08fbef5762e81b4d79b573015988bd8da4975534a352adc1ef8003c63" name="procps-ng" arch="src">
  <version epoch="0" ver="4.0.2" rel="14.oe2203sp1"/>
  <changelog author="zhoujie &lt;zhoujie133@huawei.com&gt; - 4.0.2-5" date="1687780800">- pmap: increase memory allocation failure judgment</changelog>
  <changelog author="zhoujie &lt;zhoujie133@huawei.com&gt; - 4.0.2-6" date="1687953600">- top: added guest tics when multiple cpus were merged</changelog>
  <changelog author="Xi Fnegfei &lt;xi.fengfei@h3c.com&gt; - 4.0.2-7" date="1689076800">- library: restore the proper main thread tics valuation</changelog>
  <changelog author="zhoujie &lt;zhoujie133@huawei.com&gt; - 4.0.2-8" date="1689163200">- vmstat: Update memory statistics</changelog>
  <changelog author="zhoujie &lt;zhoujie133@huawei.com&gt; - 4.0.2-9" date="1689249600">- vmstat: print guest time</changelog>
  <changelog author="Liu Chao &lt;liuchao173@huawei.com&gt; - 4.0.2-10" date="1692100800">- ps: Fix possible buffer overflow in -C option</changelog>
  <changelog author="Weifeng Su &lt;suweifeng1@huawei.com&gt; - 4.0.2-11" date="1711713600">- backport patch to Correct BSD c option issue</changelog>
  <changelog author="Liu Chao &lt;liuchao173@huawei.com&gt; - 4.0.2-12" date="1712059200">- library: address remaining cpu distorrions, &lt;stat&gt; api</changelog>
  <changelog author="yinyongkang &lt;yinyongkang@kylinos.cn&gt; - 4.0.2-13" date="1714046400">- ps: don't lose tasks when --sort used with forest mode</changelog>
  <changelog author="Liu Chao &lt;liuchao173@huawei.com&gt; - 4.0.2-14" date="1719316800">- top: adapt to guest/total tics chage, &lt;stat&gt; api</changelog>
</package>
<package pkgid="a1bd66b84ae59381b4d7d3ee80541672dd2dc0235305af8eb7e4428d2e05d314" name="procps-ng" arch="src">
  <version epoch="0" ver="4.0.2" rel="2.oe2203sp1"/>
  <changelog author="hewenliang &lt;hewenliang4@huawei.com&gt; - 3.3.16-16" date="1625054400">- sync patches</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@huawei.com&gt; - 3.3.17-1" date="1640606400">- update to 3.3.17</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 3.3.17-2" date="1643457600">- fix file type chamges caused by top -b redirection</changelog>
  <changelog author="zhoujie &lt;zhoujie133@huawei.com&gt; - 3.3.17-3" date="1666699200">- update the release to 3</changelog>
  <changelog author="zhoujie &lt;zhoujie133@huawei.com&gt; - 4.0.0-1" date="1667476800">- update the release to 4.0.0-1</changelog>
  <changelog author="zhoujie &lt;zhoujie133@huawei.com&gt; - 4.0.0-2" date="1667822400">- top eliminate a potential abend when exiting A mode</changelog>
  <changelog author="zhoujie &lt;zhoujie133@huawei.com&gt; - 4.0.0-3" date="1669723200">- enable make check</changelog>
  <changelog author="Liu Chao &lt;liuchao173@huawei.com&gt; - 4.0.0-4" date="1670846400">- skill: Restore the -p flag functionality</changelog>
  <changelog author="Qiang Wei &lt;qiang.wei@suse.com&gt; - 4.0.2-1" date="1675252800">- Update to 4.0.2.</changelog>
  <changelog author="zhoujie &lt;zhoujie133@huawei.com&gt; - 4.0.2-2" date="1679745600">- top: top address the missing guest tics for summary area</changelog>
</package>
<package pkgid="61367565d7f682ac0aa29de0afbef1f0ee9a735c82bbc1a2fd09b00bdb5a37ed" name="proftpd" arch="src">
  <version epoch="0" ver="1.3.8b" rel="2.oe2203sp1"/>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 1.3.7c-2" date="1641556800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix environment sensitive tests failure</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.3.7c-3" date="1647518400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add macro to control if postgresql is need</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 1.3.7c-4" date="1668772800">- Replace openEuler with vendor macro</changelog>
  <changelog author="chenchen &lt;chen_aka_jan@163.com&gt; - 1.3.8-1" date="1681214400">- Update to 1.3.8</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.3.8b-1" date="1703592000">- Update to 1.3.8b for fix CVE-2023-51713,CVE-2023-48795</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.3.8b-2" date="1703851200">- Adjust patch number</changelog>
</package>
<package pkgid="08b2164f3de01278e44e01601acc0108321dbe490e33a6dab394ca678e76197d" name="proftpd" arch="src">
  <version epoch="0" ver="1.3.8b" rel="3.oe2203sp1"/>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 1.3.7c-2" date="1641556800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix environment sensitive tests failure</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.3.7c-3" date="1647518400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add macro to control if postgresql is need</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 1.3.7c-4" date="1668772800">- Replace openEuler with vendor macro</changelog>
  <changelog author="chenchen &lt;chen_aka_jan@163.com&gt; - 1.3.8-1" date="1681214400">- Update to 1.3.8</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.3.8b-1" date="1703592000">- Update to 1.3.8b for fix CVE-2023-51713,CVE-2023-48795</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.3.8b-2" date="1703851200">- Adjust patch number</changelog>
  <changelog author="Ge Wang &lt;wang__ge@126.com&gt; - 1.3.8b-3" date="1704456000">- Fix service error message due to selinux policy mismatch</changelog>
</package>
<package pkgid="dbda85e9699b0746f1b25705edf04354e54a726fc98180912b3da70a1177b5e9" name="proftpd" arch="src">
  <version epoch="0" ver="1.3.8b" rel="4.oe2203sp1"/>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.3.7c-3" date="1647518400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add macro to control if postgresql is need</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 1.3.7c-4" date="1668772800">- Replace openEuler with vendor macro</changelog>
  <changelog author="chenchen &lt;chen_aka_jan@163.com&gt; - 1.3.8-1" date="1681214400">- Update to 1.3.8</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.3.8b-1" date="1703592000">- Update to 1.3.8b for fix CVE-2023-51713,CVE-2023-48795</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.3.8b-2" date="1703851200">- Adjust patch number</changelog>
  <changelog author="Ge Wang &lt;wang__ge@126.com&gt; - 1.3.8b-3" date="1704456000">- Fix service error message due to selinux policy mismatch</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 1.3.8b-4" date="1705060800">- Type:requirement
- ID:NA
- SUG:NA
- DESC:add Restart in proftpd.service</changelog>
</package>
<package pkgid="43c03368f8ca083458a9776d114935d139d6cdb98ce8f93fcd86193b96a7aa3b" name="pylint" arch="src">
  <version epoch="0" ver="2.12.2" rel="2.oe2203sp1"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2.12.2-2" date="1704283200">- Fix "similar -d args" not recognized</changelog>
</package>
<package pkgid="4acea7c41d53e6dbf2935fea7c98ca0229c43f1350c985f12800e195c0b53c15" name="python-PyMySQL" arch="src">
  <version epoch="0" ver="0.9.3" rel="4.oe2203sp1"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 0.9.3-4" date="1716552000">- Fix CVE-2024-36039</changelog>
</package>
<package pkgid="72e647d60f143d19df350dc9c1e5230c6f80699de394807004f73f8d2a7a47f2" name="python-aiosmtpd" arch="src">
  <version epoch="0" ver="1.4.2" rel="2.oe2203sp1"/>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 1.4.2-1" date="1665576000">- Upgrade to version 1.4.2</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.2-2" date="1710331200">- Fix CVE-2024-27305</changelog>
</package>
<package pkgid="03c5e0098315b7521a79c32e9c6bf5f50a2f349b4815d1e2b525afe0146468a2" name="python-aiosmtpd" arch="src">
  <version epoch="0" ver="1.4.6" rel="1.oe2203sp1"/>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 1.4.2-1" date="1665576000">- Upgrade to version 1.4.2</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.2-2" date="1710331200">- Fix CVE-2024-27305</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1.4.6-1" date="1716984000">- Update to 1.4.6 (bsc#1224467, CVE-2024-34083):
- STARTTLS is now fully enforced if used.</changelog>
</package>
<package pkgid="7962db9a1e0c9f283af5d58e8d0601f0726b029de8498e9e624cd40a94d6cc88" name="python-astroid" arch="src">
  <version epoch="0" ver="2.9.3" rel="2.oe2203sp1"/>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; -2.9.3-2" date="1715169600">- Fix wrapt version mismatch</changelog>
</package>
<package pkgid="59bf03e41865b9289d643733142a8379f6d2d00883573a1499b8d141f5864738" name="python-certifi" arch="src">
  <version epoch="0" ver="2023.7.22" rel="1.oe2203sp1"/>
  <changelog author="SimpleUpdate Robot &lt;tc@openeuler.org&gt; - 2021.10.8-1" date="1642593600">- Upgrade to version 2021.10.8</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2023.7.22-1" date="1690804800">- Update to 2023.7.22 for fix CVE-2023-37920 and CVE-2022-23491</changelog>
</package>
<package pkgid="39c70fb6d1aaf225d8d693517e4a6e2b6a3fbaefde08fd3616fceae5a12a2689" name="python-cryptography" arch="src">
  <version epoch="0" ver="36.0.1" rel="2.oe2203sp1"/>
  <changelog author="zhuofeng&lt;zhuofeng2@huawei.com&gt; - 36.0.1-2" date="1676376000">- Type:CVE
- CVE:CVE-2023-23931
- SUG:NA
- DESC:fix CVE-2023-23931</changelog>
</package>
<package pkgid="37ce89a204e25fb26481f909bba42d207d8c6dc1da171e0dc61da1346750983f" name="python-cryptography" arch="src">
  <version epoch="0" ver="36.0.1" rel="6.oe2203sp1"/>
  <changelog author="tianwei&lt;tianwei12@h-partners.com&gt; -3.3.1-3" date="1656590400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: add SM4 symmetric block cipher</changelog>
  <changelog author="tianwei&lt;tianwei12@h-partners.com&gt; -3.3.1-4" date="1656676800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: provide openssl apis related to SM for python</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; 36.0.1-1" date="1667304000">- Update to version 36.0.1</changelog>
  <changelog author="zhuofeng&lt;zhuofeng2@huawei.com&gt; - 36.0.1-2" date="1676376000">- Type:CVE
- CVE:CVE-2023-23931
- SUG:NA
- DESC:fix CVE-2023-23931</changelog>
  <changelog author="jichengke&lt;jichengke2011@gmail.com&gt; - 36.0.1-3" date="1680782400">- fix bogus date in changelog</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 36.0.1-4" date="1691841600">- add loongarch64 support</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 36.0.1-5" date="1701259200">- Fixed crash when loading a PKCS#7 bundle with no certificates</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 36.0.1-6" date="1701518400">- raise an exception instead of returning an empty list for pkcs7 cert loading</changelog>
</package>
<package pkgid="a539c981a9eb95008ffdd9f3c43ec154a63d4fe677de337dee4dc0aa69ecdf2a" name="python-flask" arch="src">
  <version epoch="1" ver="2.1.2" rel="4.oe2203sp1"/>
  <changelog author="Jiachen Fan&lt;fanjiachen3@huawei.com&gt; - 1.1.2-2" date="1633003200">- add missing install Requires python3-simplejson</changelog>
  <changelog author="Haiwei Li&lt;lihaiwei8@huawei.com&gt; - 1.1.2-3" date="1635336000">- backport add require pythonx-simplejson. details see issue #I4CGIS</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 1:2.1.2-1" date="1666699200">- Upgrade to version 2.1.2</changelog>
  <changelog author="zhangliangpengkun&lt;zhangliangpengkun@xfusion.com&gt; - 1:2.1.2-2" date="1673265600">- Fix linting error.</changelog>
  <changelog author="zhangliangpengkun&lt;zhangliangpengkun@xfusion.com&gt; - 1:2.1.2-3" date="1673611200">- Fix incorrect references to query in testing doc</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1:2.1.2-4" date="1683806400">- Fix CVE-2023-30861</changelog>
</package>
<package pkgid="21059de2b5885cd8f6db6f45ca52fdd3ef909a796d84dfe7c54cc905d5c3c044" name="python-gevent" arch="src">
  <version epoch="0" ver="21.1.2" rel="2.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 20.6.1-1" date="1641556800">- Fix compile failed of python-gevent</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 21.1.2-1" date="1666612800">- Update to 21.1.2</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 21.1.2-2" date="1695729600">- Fix CVE-2023-41419</changelog>
</package>
<package pkgid="e57972703a767289862ab089ce3629c8ba2efb24498a5c5ec22b5cd60096391d" name="python-idna" arch="src">
  <version epoch="0" ver="3.2" rel="3.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 3.2-2" date="1666785600">- Rebuild for next release</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 3.2-3" date="1715083200">- fix CVE-2024-3651</changelog>
</package>
<package pkgid="c1b9e22b4dd47785b0b1de5e8b803677c0f3a596e36a88ee6e24d482e8fc5bbe" name="python-jinja2" arch="src">
  <version epoch="0" ver="3.0.3" rel="3.oe2203sp1"/>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 3.0.3-2" date="1656590400">- enable check test suite</changelog>
  <changelog author="weihaohao &lt;weihaohao2.huawei.com&gt; - 3.0.3-3" date="1705924800">- Type:CVE
- CVE:CVE-2024-22195
- SUG:NA
- DESC:fix CVE-2024-22195</changelog>
</package>
<package pkgid="75cb611ceb49c753848d13e2119774adca24f569ac8631d3ce16d44e452a369e" name="python-jinja2" arch="src">
  <version epoch="0" ver="3.0.3" rel="4.oe2203sp1"/>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 3.0.3-2" date="1656590400">- enable check test suite</changelog>
  <changelog author="weihaohao &lt;weihaohao2@huawei.com&gt; - 3.0.3-3" date="1705924800">- Type:CVE
- CVE:CVE-2024-22195
- SUG:NA
- DESC:fix CVE-2024-22195</changelog>
  <changelog author="weihaohao &lt;weihaohao2@huawei.com&gt; - 3.0.3-4" date="1715342400">- Type:CVE
- CVE:CVE-2024-34064
- SUG:NA
- DESC:fix CVE-2024-34064</changelog>
</package>
<package pkgid="6a27f147a9b439e800bdd364acfea74cb5d10457f48d361d5b8c7f2a79bccb08" name="python-jwcrypto" arch="src">
  <version epoch="0" ver="1.4.2" rel="2.oe2203sp1"/>
  <changelog author="SimpleUpdate Robot &lt;tc@openeuler.org&gt; - 0.9.1-1" date="1657022400">- Upgrade to version 0.9.1</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1.4.2-1" date="1703073600">- Upgrade to 1.4.2 for fix CVE-2022-3102</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1.4.2-2" date="1703851200">- Fix CVE-2023-6681</changelog>
</package>
<package pkgid="3841cb99c1360a1a694865baf47131f404c5955e8f6fefb87b946cda9e432803" name="python-lit" arch="src">
  <version epoch="0" ver="15.0.7" rel="1.oe2203sp1"/>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 14.0.3-1" date="1655812800">- Upgrade to version 14.0.3</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 15.0.6-1" date="1671796800">- Upgrade to version 15.0.6</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 15.0.7-1" date="1675944000">- Upgrade to version 15.0.7</changelog>
</package>
<package pkgid="1def594458cdb4be7d2af7b656a84b55410bdfd619df151f7b1d56d0e68143b4" name="python-lxml" arch="src">
  <version epoch="0" ver="4.7.1" rel="6.oe2203sp1"/>
  <changelog author="renhongxun &lt;renhongxun@h-partners.com&gt; - 4.7.1-3" date="1658404800">- fix CVE-2022-2309</changelog>
  <changelog author="shixuantong &lt;shixuantong@h-partners.com&gt; - 4.7.1-4" date="1658750400">- Remove pregenerated Cython C sources</changelog>
  <changelog author="zhuofeng &lt;zhuofeng@huawei.com&gt; - 4.7.1-5" date="1668600000">- change the Source0</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 4.7.1-6" date="1718193600">- Type:CVE
- CVE:CVE-2024-37388
- SUG:NA
- DESC:fix CVE-2024-37388</changelog>
</package>
<package pkgid="6c2046e831c7bac4d210223d96a6524a7ea6f70f56d7230e14c5648951ee6a94" name="python-ovs" arch="src">
  <version epoch="0" ver="2.13.3" rel="2.oe2203sp1"/>
  <changelog author="Python_Bot &lt;Python_Bot@openeuler.org&gt;" date="1621512000">- Package Spec generated</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt;" date="1681819200">- Add Conflicts with python3-openvswitch</changelog>
</package>
<package pkgid="4cc9e711e01f95dabfba68f159f1eee2988a151b3526a4c0a1974fefe2f31786" name="python-paramiko" arch="src">
  <version epoch="0" ver="2.11.0" rel="3.oe2203sp1"/>
  <changelog author="zhanzhimin &lt;zhanzhimin@h-partners.com&gt; - 2.8.1-2" date="1645876800">- drop invoke dependencies as it requires ancient pytest</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 2.8.1-3" date="1648468800">- fix CVE-2022-24302 and the rear patch of CVE-2022-24302</changelog>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 2.11.0-1" date="1655985600">- Upgrade to version 2.11.0</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.11.0-2" date="1667217600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix error in sftp testcase</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.11.0-3" date="1704974400">- fix CVE-2023-48795</changelog>
</package>
<package pkgid="8d11c75bb3f826f9c3fb263cc9e79be307facade5c55bdc1028d1bdd9bbcb785" name="python-pillow" arch="src">
  <version epoch="0" ver="9.0.1" rel="4.oe2203sp1"/>
  <changelog author="yangcheng &lt;yangcheng1203@163.com&gt; - 8.1.2-4" date="1644408000">- Type:CVE
- CVE:CVE-2022-22815,CVE-2022-22816,CVE-2022-22817
- SUG:NA
- DESC:fix CVE-2022-22815,CVE-2022-22816,CVE-2022-22817</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 8.1.2-5" date="1645099200">- fix CVE-2022-24303</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 9.0.1-1" date="1646308800">- DESC:update to Pillow-9.0.1</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 9.0.1-2" date="1650456000">- correct memory allocation in alloc_array (this is the rear patch of CVE-2022-22815,CVE-2022-22816)</changelog>
  <changelog author="qz_cx &lt;wangqingzheng@kylinos.cn&gt; - 9.0.1-3" date="1668686400">- Type:CVE
- ID:NA
- SUG:NA
- DESC: fix CVE-2022-45199</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 9.0.1-4" date="1699963200">- Type:CVE
- ID:NA
- SUG:NA
- DESC: fix CVE-2023-44271</changelog>
</package>
<package pkgid="6e6a980e739844aa6f85c9a1acacb8f0b7b762f13803f25473f046442cb26ec5" name="python-pillow" arch="src">
  <version epoch="0" ver="9.0.1" rel="5.oe2203sp1"/>
  <changelog author="yangcheng &lt;yangcheng1203@163.com&gt; - 8.1.2-4" date="1644408000">- Type:CVE
- CVE:CVE-2022-22815,CVE-2022-22816,CVE-2022-22817
- SUG:NA
- DESC:fix CVE-2022-22815,CVE-2022-22816,CVE-2022-22817</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 8.1.2-5" date="1645099200">- fix CVE-2022-24303</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 9.0.1-1" date="1646308800">- DESC:update to Pillow-9.0.1</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 9.0.1-2" date="1650456000">- correct memory allocation in alloc_array (this is the rear patch of CVE-2022-22815,CVE-2022-22816)</changelog>
  <changelog author="qz_cx &lt;wangqingzheng@kylinos.cn&gt; - 9.0.1-3" date="1668686400">- Type:CVE
- ID:NA
- SUG:NA
- DESC: fix CVE-2022-45199</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 9.0.1-4" date="1699963200">- Type:CVE
- ID:NA
- SUG:NA
- DESC: fix CVE-2023-44271</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.0.1-5" date="1701950400">- Fix CVE-2022-45198</changelog>
</package>
<package pkgid="41f92bc28140477b645b619beca34f19a7aff3b6fc00525b418a67ffde7e5c70" name="python-pillow" arch="src">
  <version epoch="0" ver="9.0.1" rel="6.oe2203sp1"/>
  <changelog author="yangcheng &lt;yangcheng1203@163.com&gt; - 8.1.2-4" date="1644408000">- Type:CVE
- CVE:CVE-2022-22815,CVE-2022-22816,CVE-2022-22817
- SUG:NA
- DESC:fix CVE-2022-22815,CVE-2022-22816,CVE-2022-22817</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 8.1.2-5" date="1645099200">- fix CVE-2022-24303</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 9.0.1-1" date="1646308800">- DESC:update to Pillow-9.0.1</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 9.0.1-2" date="1650456000">- correct memory allocation in alloc_array (this is the rear patch of CVE-2022-22815,CVE-2022-22816)</changelog>
  <changelog author="qz_cx &lt;wangqingzheng@kylinos.cn&gt; - 9.0.1-3" date="1668686400">- Type:CVE
- ID:NA
- SUG:NA
- DESC: fix CVE-2022-45199</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 9.0.1-4" date="1699963200">- Type:CVE
- ID:NA
- SUG:NA
- DESC: fix CVE-2023-44271</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.0.1-5" date="1701950400">- Fix CVE-2022-45198</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.0.1-6" date="1706097600">- Fix CVE-2023-50447</changelog>
</package>
<package pkgid="49dd5532fa5958e17c59c166fa2d32689c5bb9f583c3b3dc8df6066fc327fc09" name="python-pillow" arch="src">
  <version epoch="0" ver="9.0.1" rel="7.oe2203sp1"/>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 9.0.1-2" date="1650456000">- correct memory allocation in alloc_array (this is the rear patch of CVE-2022-22815,CVE-2022-22816)</changelog>
  <changelog author="qz_cx &lt;wangqingzheng@kylinos.cn&gt; - 9.0.1-3" date="1668686400">- Type:CVE
- ID:NA
- SUG:NA
- DESC: fix CVE-2022-45199</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 9.0.1-4" date="1699963200">- Type:CVE
- ID:NA
- SUG:NA
- DESC: fix CVE-2023-44271</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.0.1-5" date="1701950400">- Fix CVE-2022-45198</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.0.1-6" date="1706097600">- Fix CVE-2023-50447</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.0.1-7" date="1712491200">- Fix CVE-2024-28219</changelog>
</package>
<package pkgid="add4b2de9688546841f99235e4ba31d33f8915b11122d6ed05ab155a863a34c2" name="python-pip" arch="src">
  <version epoch="0" ver="21.3.1" rel="6.oe2203sp1"/>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 21.3.1-2" date="1656676800">- Add patches that are deleted during the upgrade</changelog>
  <changelog author="yanglongkang &lt;yanglongkang@h-partners.com&gt; - 21.3.1-3" date="1702468800">- Fix vulnerable regex</changelog>
  <changelog author="yangyuan &lt;yangyuan32@huawei.com&gt; - 21.3.1-4" date="1717761600">- fix CVE-2024-3651</changelog>
  <changelog author="yangyuan &lt;yangyuan32@huawei.com&gt; - 21.3.1-5" date="1718625600">- fix CVE-2023-43804</changelog>
  <changelog author="zhangruifang &lt;zhangruifang@h-partners.com&gt; - 21.3.1-6" date="1719403200">- fix CVE-2023-45803 CVE-2024-37891</changelog>
</package>
<package pkgid="f24778e35e568bb21b5815d3408dfc484b39bf67ab95260e6f544285fe4e7ed2" name="python-pycryptodome" arch="src">
  <version epoch="0" ver="3.19.1" rel="1.oe2203sp1"/>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 3.11.0-2" date="1656676800">- enable check test suite</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.19.1-1" date="1704801600">- Upgrade to version 3.19.1 for fix CVE-2023-52323</changelog>
</package>
<package pkgid="c5f8b66333038441e828c771ce0ca28599e09e12b0f9764dc0cee366ea22da1c" name="python-pycryptodome" arch="src">
  <version epoch="0" ver="3.19.1" rel="2.oe2203sp1"/>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 3.11.0-2" date="1656676800">- enable check test suite</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.19.1-1" date="1704801600">- Upgrade to version 3.19.1 for fix CVE-2023-52323</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 3.19.1-2" date="1708603200">- do not pack test case files</changelog>
</package>
<package pkgid="2e4f07c1974b9e6626fb7ddb0d2eedb4725ff6df3b56d0832ed487cfa645d0ad" name="python-pycryptodomex" arch="src">
  <version epoch="0" ver="3.19.1" rel="1.oe2203sp1"/>
  <changelog author="xu_ping &lt;xuping33@h-partners.com&gt; - 3.15.0-1" date="1666180800">- Upgrade to version 3.15.0</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.19.1-1" date="1704801600">- Upgrade to version 3.19.1 for fix CVE-2023-52323</changelog>
</package>
<package pkgid="50d06657010ab628a864e42139c63e7af02a0b6437206a20fdb4c07304023a59" name="python-pygments" arch="src">
  <version epoch="0" ver="2.10.0" rel="4.oe2203sp1"/>
  <changelog author="OpenStack_SIG &lt;openstack@openeuler.org&gt; - 2.8.1-1" date="1628251200">- Update version to 2.8.1</changelog>
  <changelog author="renhongxun &lt;renhongxun@huawei.com&gt; - 2.10.0-1" date="1640001600">- Upgrade version to 2.10.0</changelog>
  <changelog author="caofei &lt;caofei@xfusion.com&gt; -  2.10.0-2" date="1673870400">- fixed typo</changelog>
  <changelog author="caofei &lt;caofei@xfusion.com&gt; -  2.10.0-3" date="1674043200">- Fix "do concurrent" and "go to" keywords in the Fortran</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.10.0-4" date="1690372800">- Type:CVE
- CVE:CVE-2022-40896
- SUG:NA
- DESC:fix CVE-2022-40896</changelog>
</package>
<package pkgid="b8fa3afec41724321f60eec818b7c6872df51beddaf948a348cb90d76beab375" name="python-pymongo" arch="src">
  <version epoch="0" ver="3.11.3" rel="3.oe2203sp1"/>
  <changelog author="liubo &lt;liubo1@xfusion.com&gt; - 3.11.3-2" date="1699444800">- Add missing error message to InvalidBSON error</changelog>
  <changelog author="liweigang &lt;liweiganga@uniontech.com&gt; - 3.11.3-3" date="1712491200">- Fix CVE-2024-21506</changelog>
</package>
<package pkgid="719bfe936d3793fb6611fac8fb5ad3c05f5db1af8869869997a71644355266fe" name="python-reportlab" arch="src">
  <version epoch="0" ver="3.6.10" rel="2.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 3.4.0-13" date="1626868800">- Fix CVE-2019-17626</changelog>
  <changelog author="Chengshaowei &lt;chenshaowei3@huawei.com&gt; - 3.4.0-14" date="1641988800">- Fix can not import error</changelog>
  <changelog author="SimpleUpdate Robot &lt;tc@openeuler.org&gt; - 3.6.10-1" date="1655985600">- Upgrade to version 3.6.10</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 3.6.10-2" date="1687953600">- Fix CVE-2023-33733</changelog>
</package>
<package pkgid="61204c2a92edf1ce09b056fb1847ef793eebc68c7c41656b97f3069491a47fdc" name="python-requests" arch="src">
  <version epoch="0" ver="2.26.0" rel="8.oe2203sp1"/>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 2.26.0-1" date="1638619200">- update to 2.26.0</changelog>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 2.26.0-2" date="1639396800">- provide pythonxdist(requests)</changelog>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 2.26.0-3" date="1640174400">- add python-charset-normalizer</changelog>
  <changelog author="yangcheng &lt;yangcheng87@huawei.com&gt; - 2.26.0-4" date="1640865600">- Adapt to python 3.9.9</changelog>
  <changelog author="zhujunhao &lt;zhujunhao8@huawei.com&gt; - 2.26.0-5" date="1641902400">- modify build failed</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 2.26.0-6" date="1666699200">- rebuild for next release</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 2.26.0-7" date="1667649600">- Fix the mailman build error caused by the python-chardet update.</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.26.0-8" date="1685534400">- fix CVE-2023-32681</changelog>
</package>
<package pkgid="c0692353c9392ea351ddac2aad6f16e272de7cee10bd85a73cc54c3acd8c6ab9" name="python-scikit-learn" arch="src">
  <version epoch="0" ver="1.1.1" rel="2.oe2203sp1"/>
  <changelog author="xu_ping &lt;xuping33@h-partners.com&gt; - 1.1.1-1" date="1666699200">- Upgrade to version 1.1.1</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1.1.1-2" date="1718625600">- Fix CVE-2024-5206</changelog>
</package>
<package pkgid="6db8a454d22275ddbd4976a038de303be3bb9ca248a8503593b7b763aefeec01" name="python-setuptools" arch="src">
  <version epoch="0" ver="59.4.0" rel="5.oe2203sp1"/>
  <changelog author="shixuantong&lt;shixuantong@huawei.com&gt; - 54.2.0-1" date="1617019200">- upgrade version to 54.2.0</changelog>
  <changelog author="renhongxun&lt;renhongxun@huawei.com&gt; - 59.4.0-1" date="1640174400">- upgrade version to 59.4.0</changelog>
  <changelog author="shixuantong &lt;shixuantong@huawei.com&gt; - 59.4.0-2" date="1640779200">- add bootstrap for rebuild python3-3.9.9</changelog>
  <changelog author="shixuantong &lt;shixuantong@huawei.com&gt; - 59.4.0-3" date="1641297600">- Bootstrap for Python 3.9.9</changelog>
  <changelog author="zhangruifang &lt;zhangruifang1@h-partners.com&gt; - 59.4.0-4" date="1666872000">- Rebuild for next release</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 59.4.0-5" date="1672833600">- Type:CVE
- CVE:CVE-2022-40897
- SUG:NA
- DESC:fix CVE-2022-40897</changelog>
</package>
<package pkgid="ce6fc783e8da7f755226bfaa629aaaea2568daf44be5faea499f5b39a1a213b5" name="python-setuptools" arch="src">
  <version epoch="0" ver="59.4.0" rel="6.oe2203sp1"/>
  <changelog author="zhangruifang &lt;zhangruifang1@h-partners.com&gt; - 59.4.0-4" date="1666872000">- Rebuild for next release</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 59.4.0-5" date="1672833600">- Type:CVE
- CVE:CVE-2022-40897
- SUG:NA
- DESC:fix CVE-2022-40897</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech&gt; - 59.4.0-6" date="1721044800">- Fix CVE-2024-6345</changelog>
</package>
<package pkgid="03872f4c8bcbfd4d47a24a87f5bb0f32a5fa6a1543908357eb4d75819be23186" name="python-sphinx" arch="src">
  <version epoch="1" ver="4.4.0" rel="2.oe2203sp1"/>
  <changelog author="OpenStack_SIG &lt;openstack@openeuler.org&gt; - 3.5.2-1" date="1627387200">- update to 3.5.2</changelog>
  <changelog author="shixuantong &lt;shixuantong@huawei.com&gt; - 4.3.1-1" date="1639396800">- update version to 4.3.1</changelog>
  <changelog author="shixuantong &lt;shixuantong@huawei.com&gt; - 4.3.1-2" date="1641470400">- fix docutils version error</changelog>
  <changelog author="shixuantong &lt;shixuantong@huawei.com&gt; - 4.3.1-3" date="1641988800">- revert openEuler-fix-docutils-version-error.patch</changelog>
  <changelog author="xu_ping &lt;xuping33@h-partners.com&gt; - 1:4.4.0-1" date="1666872000">- Upgrade 4.4.0</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 1:4.4.0-2" date="1689854400">- html: Updated jQuery version from 3.5.1 to 3.6.0</changelog>
</package>
<package pkgid="3b1a67e756c72577b7026d8dd20bf7b0a1620d0f6c4dca48d0b47886a3a686f3" name="python-tornado" arch="src">
  <version epoch="0" ver="6.1" rel="2.oe2203sp1"/>
  <changelog author="yaozc701 &lt;yaozc7@foxmail.com&gt; - 6.1-1" date="1625745600">- Upgrade version to 6.1</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 6.1-2" date="1686916800">- Fix CVE-2023-28370</changelog>
</package>
<package pkgid="cf85a8f3f9ba938f3dd657e269557c63699a33c9aac6c34c4f3e3c74f5b2f03f" name="python-tqdm" arch="src">
  <version epoch="0" ver="4.56.0" rel="4.oe2203sp1"/>
  <changelog author="xu_ping &lt;xuping33@h-partners.com&gt; - 4.56.0-3" date="1668427200">- change source path</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 4.56.0-4" date="1714996800">- Fix CVE-2024-34062</changelog>
</package>
<package pkgid="77c331edd8cb8dda2102c001373d5803592ff97320635ecd561abdff8eea32c4" name="python-uWSGI" arch="src">
  <version epoch="0" ver="2.0.19.1" rel="5.oe2203sp1"/>
  <changelog author="huanghaitao &lt;huanghaitao8@huawei.com&gt; - 2.0.19.1-2" date="1622462400">- Completing build dependencies to fix gcc compiler missing error</changelog>
  <changelog author="chenyanpanHW &lt;chenyanpan@huawei.com&gt; -  2.0.19.1-3" date="1630411200">- DESC: uwsgi add BuildRequires openssl-devel to support --https</changelog>
  <changelog author="baizhonggui &lt;baizhonggui@huawei.com&gt; -  2.0.19.1-4" date="1647691200">- The setup.py install is deprecated, use pip install instead to fix build error</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 2.0.19.1-5" date="1670241600">- Remove rpath</changelog>
</package>
<package pkgid="c997e90c3d34649a5bab4e78cf8867003563376740855063849f40307ed93386" name="python-urllib3" arch="src">
  <version epoch="0" ver="1.26.12" rel="3.oe2203sp1"/>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 1.26.3-2" date="1622548800">- fix CVE-2021-28363</changelog>
  <changelog author="zhanzhimin &lt;zhanzhimin@huawei.com&gt; - 1.26.3-3" date="1625486400">- fix CVE-2021-33503</changelog>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 1.26.7-1" date="1642593600">- update to 1.26.7 and remove python-nose dependency</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 1.26.7-2" date="1657108800">- add patch Bump RECENT_DATE and solve test case test_recent_date failed</changelog>
  <changelog author="OpenStack_SIG &lt;openstack@openeuler.org&gt; - 1.26.8-1" date="1658145600">- Upgrade package to version 1.26.8</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 1.26.8-2" date="1660046400">- delete patch Bump-RECENT_DATE.patch and modify RECENT_DATE in python-urllib3.spec to adapt time change</changelog>
  <changelog author="tianlijing &lt;tianlijing@kylinos.cn&gt; - 1.26.12-1" date="1662292800">- update to 1.26.12</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 1.26.12-2" date="1671278400">- DESC:fix util.parse_url function traceback when port have leading zeros</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 1.26.12-3" date="1676030400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:change _HOST_PORT_PAT to fix port is 0 but return None</changelog>
</package>
<package pkgid="943398d8f05f7fc4ab301adc330f61a8fe9b1627dce1b7af778c976f05243551" name="python-urllib3" arch="src">
  <version epoch="0" ver="1.26.12" rel="4.oe2203sp1"/>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 1.26.3-2" date="1622548800">- fix CVE-2021-28363</changelog>
  <changelog author="zhanzhimin &lt;zhanzhimin@huawei.com&gt; - 1.26.3-3" date="1625486400">- fix CVE-2021-33503</changelog>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 1.26.7-1" date="1642593600">- update to 1.26.7 and remove python-nose dependency</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 1.26.7-2" date="1657108800">- add patch Bump RECENT_DATE and solve test case test_recent_date failed</changelog>
  <changelog author="OpenStack_SIG &lt;openstack@openeuler.org&gt; - 1.26.8-1" date="1658145600">- Upgrade package to version 1.26.8</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 1.26.8-2" date="1660046400">- delete patch Bump-RECENT_DATE.patch and modify RECENT_DATE in python-urllib3.spec to adapt time change</changelog>
  <changelog author="tianlijing &lt;tianlijing@kylinos.cn&gt; - 1.26.12-1" date="1662292800">- update to 1.26.12</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 1.26.12-2" date="1671278400">- DESC:fix util.parse_url function traceback when port have leading zeros</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 1.26.12-3" date="1676030400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:change _HOST_PORT_PAT to fix port is 0 but return None</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 1.26.12-4" date="1679400000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix socket timeout value when HTTPConnect is reused
       remove Exclamation mark character from the unreserved characters
       fix _idna_encode handling of x80</changelog>
</package>
<package pkgid="fdc370a2a551fdcc079f82d37c6f29b4558427d41cb5f24101fa0bfb3755b9dc" name="python-urllib3" arch="src">
  <version epoch="0" ver="1.26.12" rel="5.oe2203sp1"/>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 1.26.7-1" date="1642593600">- update to 1.26.7 and remove python-nose dependency</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 1.26.7-2" date="1657108800">- add patch Bump RECENT_DATE and solve test case test_recent_date failed</changelog>
  <changelog author="OpenStack_SIG &lt;openstack@openeuler.org&gt; - 1.26.8-1" date="1658145600">- Upgrade package to version 1.26.8</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 1.26.8-2" date="1660046400">- delete patch Bump-RECENT_DATE.patch and modify RECENT_DATE in python-urllib3.spec to adapt time change</changelog>
  <changelog author="tianlijing &lt;tianlijing@kylinos.cn&gt; - 1.26.12-1" date="1662292800">- update to 1.26.12</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 1.26.12-2" date="1671278400">- DESC:fix util.parse_url function traceback when port have leading zeros</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 1.26.12-3" date="1676030400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:change _HOST_PORT_PAT to fix port is 0 but return None</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 1.26.12-4" date="1679400000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix socket timeout value when HTTPConnect is reused
       remove Exclamation mark character from the unreserved characters
       fix _idna_encode handling of x80</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1.26.12-5" date="1696420800">- fix CVE-2023-43804</changelog>
</package>
<package pkgid="65b5fb78b4901ae516442c09189586f00803dae3f4d661ede5912f539b395964" name="python-urllib3" arch="src">
  <version epoch="0" ver="1.26.12" rel="6.oe2203sp1"/>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 1.26.7-1" date="1642593600">- update to 1.26.7 and remove python-nose dependency</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 1.26.7-2" date="1657108800">- add patch Bump RECENT_DATE and solve test case test_recent_date failed</changelog>
  <changelog author="OpenStack_SIG &lt;openstack@openeuler.org&gt; - 1.26.8-1" date="1658145600">- Upgrade package to version 1.26.8</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 1.26.8-2" date="1660046400">- delete patch Bump-RECENT_DATE.patch and modify RECENT_DATE in python-urllib3.spec to adapt time change</changelog>
  <changelog author="tianlijing &lt;tianlijing@kylinos.cn&gt; - 1.26.12-1" date="1662292800">- update to 1.26.12</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 1.26.12-2" date="1671278400">- DESC:fix util.parse_url function traceback when port have leading zeros</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 1.26.12-3" date="1676030400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:change _HOST_PORT_PAT to fix port is 0 but return None</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 1.26.12-4" date="1679400000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix socket timeout value when HTTPConnect is reused
       remove Exclamation mark character from the unreserved characters
       fix _idna_encode handling of x80</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1.26.12-5" date="1696420800">- Type:CVE
- CVE:CVE-2023-43804
- SUG:NA
- DESC:fix CVE-2023-43804</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 1.26.12-6" date="1699012800">- Type:CVE
- CVE:CVE-2023-45803
- SUG:NA
- DESC:fix CVE-2023-45803</changelog>
</package>
<package pkgid="37e69a0344ff73ff2164b8245a0764c3ce93d872d23cf0a52e94c9f8b07ec7a8" name="python-urllib3" arch="src">
  <version epoch="0" ver="1.26.12" rel="7.oe2203sp1"/>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 1.26.7-2" date="1657108800">- add patch Bump RECENT_DATE and solve test case test_recent_date failed</changelog>
  <changelog author="OpenStack_SIG &lt;openstack@openeuler.org&gt; - 1.26.8-1" date="1658145600">- Upgrade package to version 1.26.8</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 1.26.8-2" date="1660046400">- delete patch Bump-RECENT_DATE.patch and modify RECENT_DATE in python-urllib3.spec to adapt time change</changelog>
  <changelog author="tianlijing &lt;tianlijing@kylinos.cn&gt; - 1.26.12-1" date="1662292800">- update to 1.26.12</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 1.26.12-2" date="1671278400">- DESC:fix util.parse_url function traceback when port have leading zeros</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 1.26.12-3" date="1676030400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:change _HOST_PORT_PAT to fix port is 0 but return None</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 1.26.12-4" date="1679400000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix socket timeout value when HTTPConnect is reused
       remove Exclamation mark character from the unreserved characters
       fix _idna_encode handling of x80</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1.26.12-5" date="1696420800">- Type:CVE
- CVE:CVE-2023-43804
- SUG:NA
- DESC:fix CVE-2023-43804</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 1.26.12-6" date="1699012800">- Type:CVE
- CVE:CVE-2023-45803
- SUG:NA
- DESC:fix CVE-2023-45803</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 1.26.12-7" date="1719316800">- Type:CVE
- CVE:CVE-2024-37891
- SUG:NA
- DESC:fix CVE-2024-37891 Strip Proxy-Authorization header on redirects</changelog>
</package>
<package pkgid="30eb5451913424eb55a0737f13e5236f54ea40d7884a76272712fbbf208cca84" name="python-webob" arch="src">
  <version epoch="0" ver="1.8.7" rel="3.oe2203sp1"/>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1.8.7-3" date="1723723200">- Fix CVE-2024-42353</changelog>
</package>
<package pkgid="c2e6ad38125a48041c04a26594425f4aa4eb7223b04f3ecfa3acd5c5875ae07c" name="python-werkzeug" arch="src">
  <version epoch="0" ver="2.0.3" rel="4.oe2203sp1"/>
  <changelog author="liwu &lt;liwu13@huawei.com&gt; - 1.2.1-2" date="1640088000">- fix test failures due to unhandled exceptions being thrown without being propagated to caller</changelog>
  <changelog author="Ge Wang &lt;wange20@h-partners.com&gt; - 2.0.3-1" date="1666699200">- Upgrade to version 2.0.3</changelog>
  <changelog author="Bolehu &lt;heyaohua@xfusion.com&gt; - 2.0.3-2" date="1673092800">- fix typo and grammar mistake</changelog>
  <changelog author="Bolehu &lt;heyaohua@xfusion.com&gt; - 2.0.3-3" date="1673265600">- fix flake8-bugbear finding</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.0.3-4" date="1692014400">- Fix CVE-2023-23934 and CVE-2023-25577</changelog>
</package>
<package pkgid="72c8c1b1c925cc3939f004c054b0638fd2d2bfc151230347524a269b6c9f5ec0" name="python-wheel" arch="src">
  <version epoch="1" ver="0.37.0" rel="6.oe2203sp1"/>
  <changelog author="shixuantong&lt;shixuantong@huawei.com&gt; - 0.37.0-1" date="1640088000">- update version to 0.37.0</changelog>
  <changelog author="zhangruifang &lt;zhangruifang1@h-partners.com&gt; - 0.37.0-2" date="1666872000">- Rebuild for next release</changelog>
  <changelog author="liubo &lt;liubo1@xfusion.com&gt; - 1:0.37.0-3" date="1697112000">- Fixed wheel pack duplicating WHEEL contents on build number</changelog>
  <changelog author="liubo &lt;liubo1@xfusion.com&gt; - 1:0.37.0-4" date="1697544000">- Fixed the non-standard format of changelog</changelog>
  <changelog author="liubo &lt;liubo1@xfusion.com&gt; - 1:0.37.0-5" date="1699444800">- Support unpacking wheels that contain files with commas in their names</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:0.37.0-6" date="1701950400">- Fix CVE-2022-40898</changelog>
</package>
<package pkgid="04413e6148613d1ee9f6090256f6ffb0e402b93628287b359d659587550eb8fc" name="python-zipp" arch="src">
  <version epoch="0" ver="3.7.0" rel="3.oe2203sp1"/>
  <changelog author="liksh &lt;liks11@chinaunicom.cn&gt; - 3.7.0-1" date="1659009600">- Upgrade for openstack yoga</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 3.7.0-2" date="1708430400">- remove useless requires</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 3.7.0-3" date="1720526400">- Fix CVE-2024-5569</changelog>
</package>
<package pkgid="f8286cc6fc500a4dee90e0898ec80e740a33ede51555f0f1e57f9bc291436be1" name="python3" arch="src">
  <version epoch="0" ver="3.9.9" rel="24.oe2203sp1"/>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 3.9.9-23" date="1678708800">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC: Enable link time optimizaitons (LTO) for better performance.</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt;- 3.9.9-24" date="1680782400">- Type:CVE
- CVE:CVE-2023-24329
- SUG:NA
- DESC:fix CVE-2023-24329</changelog>
</package>
<package pkgid="95d165b0687b5620ff881abbb1266717b52dc140654ac4ac577782480a91ee24" name="python3" arch="src">
  <version epoch="0" ver="3.9.9" rel="25.oe2203sp1"/>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 3.9.9-23" date="1678708800">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC: Enable link time optimizaitons (LTO) for better performance.</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt;- 3.9.9-24" date="1680782400">- Type:CVE
- CVE:CVE-2023-24329
- SUG:NA
- DESC:fix CVE-2023-24329</changelog>
  <changelog author="zhaoyu &lt;zhaoyu64@huawei.com&gt;- 3.9.9-25" date="1691409600">- Type:CVE
- CVE:CVE-2007-4559
- SUG:NA
- DESC:Add a filter parameter to tarfile.extractall will allow users to avoid CVE-2007-4559 by changing their code/settings.</changelog>
</package>
<package pkgid="85d3b1e9b2c682be5e19922f0e7438efabcb201346ec3c6eae4e65c7c8fd30c9" name="python3" arch="src">
  <version epoch="0" ver="3.9.9" rel="26.oe2203sp1"/>
</package>
<package pkgid="a96b95dbf0312ef03494fe57a807e6c95eea4a3f9b5de6d0928c3ac114023673" name="python3" arch="src">
  <version epoch="0" ver="3.9.9" rel="28.oe2203sp1"/>
</package>
<package pkgid="2dc75c8e0f32f4611b3470333026bba534adfa2d8694b516d5a722ad7f7f1deb" name="python3" arch="src">
  <version epoch="0" ver="3.9.9" rel="31.oe2203sp1"/>
  <changelog author="xinsheng &lt;xinsheng3@huawei.com&gt; - 3.9.9-31" date="1725364800">- Type:CVE
- CVE:NA
- SUG:NA
- DESC:fix CVE-2024-6923,CVE-2024-7592,CVE-2024-8088
    - Encode newlines in headers, and verify headers are sound
    - Fix quadratic complexity in parsing quoted cookie values with backslashes
    - Replaced SanitizedNames with a more surgical fix</changelog>
</package>
<package pkgid="8aca902734ed252333a005d1ea98c125b2a080b2a4f379119a45ea39b39cd1f8" name="python3" arch="src">
  <version epoch="0" ver="3.9.9" rel="32.oe2203sp1"/>
  <changelog author="xinsheng &lt;xinsheng3@huawei.com&gt; - 3.9.9-31" date="1725364800">- Type:CVE
- CVE:NA
- SUG:NA
- DESC:fix CVE-2024-6923,CVE-2024-7592,CVE-2024-8088
    - Encode newlines in headers, and verify headers are sound
    - Fix quadratic complexity in parsing quoted cookie values with backslashes
    - Replaced SanitizedNames with a more surgical fix</changelog>
  <changelog author="xinsheng &lt;xinsheng3@huawei.com&gt; - 3.9.9-32" date="1727179200">- Type:CVE
- CVE:CVE-2024-6232,CVE-2024-3219,CVE-2024-0450,CVE-2023-6597,CVE-2024-4032
- SUG:NA
- DESC:fix CVE-2024-6232,CVE-2024-3219,CVE-2024-0450,CVE-2023-6597,CVE-2024-4032
    - rename all CVE patch name
    - CVE-2024-6232: Remove backtracking when parsing tarfile headers
    - CVE-2024-3219: patch1 Authenticate socket connection for `socket.socketpair()` fallback
    - CVE-2024-3219: patch2 Rework pure Python socketpair tests to avoid use of importlib.reload.
    - CVE-2024-0450: Protect zipfile from "quoted-overlap" zipbomb
    - CVE-2023-6597: tempfile.TemporaryDirectory: fix symlink bug in cleanup
    - CVE-2024-4032: Fix "private" (non-global) IP address ranges</changelog>
</package>
<package pkgid="8859e4d804a8327c641358aaeb5d838b183052a414d6de39fd81b129ec2d6fee" name="qemu" arch="src">
  <version epoch="10" ver="6.2.0" rel="74.oe2203sp1"/>
  <changelog author="yezengruan &lt;yezengruan@huawei.com&gt; - 10:6.2.0-65" date="1671537600">- linux-user: Add strace output for timer_settime64() syscall
- fix qemu-core when vhost-user-net config with server mode</changelog>
  <changelog author="MinMin Ren &lt;renmm6@chinaunicom.cn&gt; - 10:6.2.0-66" date="1679486400">- spec: Add multiboot_dma.bin</changelog>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-67" date="1680004800">- hw/net/vmxnet3: Log guest-triggerable errors using LOG_GUEST_ERROR mainline
- net/eth: Don't consider ESP to be an IPv6 option header mainline
- net: Fix uninitialized data usage mainline
- block-backend: prevent dangling BDS pointers across aio_poll() mainline inclusion
- i386: add notify VM exit support
- kvm: expose struct KVMState
- kvm: allow target-specific accelerator properties
- i386: kvm: extend kvm_{get, put}_vcpu_events to support pending triple fault
- linux-headers: include missing changes from 6.0
- dsoundaudio: fix crackling audio recordings mainline
- hw/audio/intel-hda: fix stream reset mainline
- hw/pvrdma: Protect against buggy or malicious guest driver
- qemu support for loongarch
- hw/pci: Trace IRQ routing on PCI topology
- hw/pci: Fix a typo
- hw/riscv: virt: Simplify virt_{get,set}_aclint()
- curl: Fix error path in curl_open()
- tests: add (riscv virt) machine mapping to testenv from v7.0.0
- tests/tcg: Fix target-specific Makefile variables  path for user-mode mainline
- hw/core/machine:Fix the missing consideration of cluster-id
- arm/virt: Correct timing of pause all vcpus for hot-plugged CPUs
- arm/virt: Correct timing of executing cpu_synchronize_post_init for hot-plugged cpus
- hw/acpi: Support acpi-ged to report CPU's OST info
- hw/acpi: Add ospm_status hook implementation for acpi-ged
- fix qmp command migrate-set-parameters</changelog>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-68" date="1680091200">- modify qemu.spec to add (riscv virt) machine mapping to testenv from v7.0.0</changelog>
  <changelog author="&lt;lixianglai@loongson.cn&gt; - 10:6.2.0-69" date="1680091201">- fixup compile error. Add function kvm_arch_accel_class_init definition on loongarch64 machine.</changelog>
  <changelog author="&lt;lixianglai@loongson.cn&gt; - 10:6.2.0-70" date="1680177600">- Add spice buildrequires for loongarch.</changelog>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-71" date="1682164800">- vhost-user-blk: fix the resize crash
- plugins: make qemu_plugin_user_exit's locking order consistent with fork_start's
- linux-user: fix strace build w/out munlockall
- ui: fix crash on serial reset, during init
- qga/win/vss: requester_freeze changes
- migration: fix populate_vfio_info
- block/rbd: workaround for ceph issue #53784
- target/i386: add FZRM, FSRS, FSRC
- i386: Add new CPU model SapphireRapids
- core/cpu-common: Fix the wrong '#ifdef __aarch64__'</changelog>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-72" date="1684324800">- migration/xbzrle: fix out-of-bounds write with axv512
- migration/xbzrle: use ctz64 to avoid undefined result
- Update bench-code for addressing CI problem
- AVX512 support for xbzrle_encode_buffer
- configure, meson: move AVX tests to meson
- target/i386: KVM: allow fast string operations if host supports them
- target/i386: add FSRM to TCG
- hw/nvme: fix memory leak in nvme_dsm
- aio-posix: fix race between epoll upgrade and aio_set_fd_handler()
- target/i386: Add SGX aex-notify and EDECCSSA support
- hw/usb/imx: Fix out of bounds access in imx_usbphy_read()
- target/i386: Set maximum APIC ID to KVM prior to vCPU creation
- target/i386: Fix sanity check on max APIC ID / X2APIC enablement</changelog>
  <changelog author="&lt;liuxiangdong5@huawei.com&gt; - 10:6.2.0-73" date="1684497600">- spec: delete useless core3-hmcode/core3-reset/uefi-bios-sw</changelog>
  <changelog author="&lt;liuxiangdong5@huawei.com&gt; - 10:6.2.0-74" date="1685016000">- spec: delete repetitive man8/qemu-ga.8* from qemu-guest-agent package</changelog>
</package>
<package pkgid="966dac5f7f5234294c84e906c7356d97422e0e4dfe9fea0ec30850be24d15f59" name="qemu" arch="src">
  <version epoch="10" ver="6.2.0" rel="76.oe2203sp1"/>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-67" date="1680004800">- hw/net/vmxnet3: Log guest-triggerable errors using LOG_GUEST_ERROR mainline
- net/eth: Don't consider ESP to be an IPv6 option header mainline
- net: Fix uninitialized data usage mainline
- block-backend: prevent dangling BDS pointers across aio_poll() mainline inclusion
- i386: add notify VM exit support
- kvm: expose struct KVMState
- kvm: allow target-specific accelerator properties
- i386: kvm: extend kvm_{get, put}_vcpu_events to support pending triple fault
- linux-headers: include missing changes from 6.0
- dsoundaudio: fix crackling audio recordings mainline
- hw/audio/intel-hda: fix stream reset mainline
- hw/pvrdma: Protect against buggy or malicious guest driver
- qemu support for loongarch
- hw/pci: Trace IRQ routing on PCI topology
- hw/pci: Fix a typo
- hw/riscv: virt: Simplify virt_{get,set}_aclint()
- curl: Fix error path in curl_open()
- tests: add (riscv virt) machine mapping to testenv from v7.0.0
- tests/tcg: Fix target-specific Makefile variables  path for user-mode mainline
- hw/core/machine:Fix the missing consideration of cluster-id
- arm/virt: Correct timing of pause all vcpus for hot-plugged CPUs
- arm/virt: Correct timing of executing cpu_synchronize_post_init for hot-plugged cpus
- hw/acpi: Support acpi-ged to report CPU's OST info
- hw/acpi: Add ospm_status hook implementation for acpi-ged
- fix qmp command migrate-set-parameters</changelog>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-68" date="1680091200">- modify qemu.spec to add (riscv virt) machine mapping to testenv from v7.0.0</changelog>
  <changelog author="&lt;lixianglai@loongson.cn&gt; - 10:6.2.0-69" date="1680091201">- fixup compile error. Add function kvm_arch_accel_class_init definition on loongarch64 machine.</changelog>
  <changelog author="&lt;lixianglai@loongson.cn&gt; - 10:6.2.0-70" date="1680177600">- Add spice buildrequires for loongarch.</changelog>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-71" date="1682164800">- vhost-user-blk: fix the resize crash
- plugins: make qemu_plugin_user_exit's locking order consistent with fork_start's
- linux-user: fix strace build w/out munlockall
- ui: fix crash on serial reset, during init
- qga/win/vss: requester_freeze changes
- migration: fix populate_vfio_info
- block/rbd: workaround for ceph issue #53784
- target/i386: add FZRM, FSRS, FSRC
- i386: Add new CPU model SapphireRapids
- core/cpu-common: Fix the wrong '#ifdef __aarch64__'</changelog>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-72" date="1684324800">- migration/xbzrle: fix out-of-bounds write with axv512
- migration/xbzrle: use ctz64 to avoid undefined result
- Update bench-code for addressing CI problem
- AVX512 support for xbzrle_encode_buffer
- configure, meson: move AVX tests to meson
- target/i386: KVM: allow fast string operations if host supports them
- target/i386: add FSRM to TCG
- hw/nvme: fix memory leak in nvme_dsm
- aio-posix: fix race between epoll upgrade and aio_set_fd_handler()
- target/i386: Add SGX aex-notify and EDECCSSA support
- hw/usb/imx: Fix out of bounds access in imx_usbphy_read()
- target/i386: Set maximum APIC ID to KVM prior to vCPU creation
- target/i386: Fix sanity check on max APIC ID / X2APIC enablement</changelog>
  <changelog author="&lt;liuxiangdong5@huawei.com&gt; - 10:6.2.0-73" date="1684497600">- spec: delete useless core3-hmcode/core3-reset/uefi-bios-sw</changelog>
  <changelog author="&lt;liuxiangdong5@huawei.com&gt; - 10:6.2.0-74" date="1685016000">- spec: delete repetitive man8/qemu-ga.8* from qemu-guest-agent package</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-75" date="1688040000">- Add lbt support for kvm.
- Fix smp.cores value and Fix divide 0 error
- hw/nvme: Change alignment in dma functions for nvme_blk_*
- virtio: fix reachable assertion due to stale value of cached region size
- hw/nvme: fix missing DNR on compare failure</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-76" date="1690545600">- qga/win32: Use rundll for VSS installation
- qga/win32: Remove change action from MSI installer
- ide: Increment BB in-flight counter for TRIM BH
- hw/pci-bridge/pxb: Fix missing swizzle
- host-vdpa: make notifiers _init()/_uninit() symmetric
- hw/virtio: vdpa: Fix leak of host-notifier memory-region
- accel/tcg/cpu-exec: Fix precise single-stepping after interrupt
- Allow setting up to 8 bytes with the generic loader
- hw/net/virtio-net: make some VirtIONet const
- accel/tcg: Optimize jump cache flush during tlb range flush
- 9pfs: prevent opening special files (CVE-2023-2861)
- tcg: Reduce tcg_assert_listed_vecop() scope
- gitlab: Disable plugins for cross-i386-tci
- vfio/pci: Fix a segfault in vfio_realize
- block/iscsi: fix double-free on BUSY or similar statuses
- tests/tcg: fix unused variable in linux-test
- hw/net/vmxnet3: allow VMXNET3_MAX_MTU itself as a value
- qga/vss-win32: fix warning for clang++-15
- vnc: avoid underflow when accessing user-provided address
- block/monitor: Fix crash when executing HMP commit
- virtio-gpu: add a FIXME for virtio_gpu_load()
- hw/ppc/Kconfig: MAC_NEWWORLD should always select USB_OHCI_PCI
- migration: report compress thread pid to libvirt</changelog>
</package>
<package pkgid="338db28614c6086717d046b192ef8d677145b1f6011c0695aff25aaed7cc1e58" name="qemu" arch="src">
  <version epoch="10" ver="6.2.0" rel="78.oe2203sp1"/>
  <changelog author="&lt;lixianglai@loongson.cn&gt; - 10:6.2.0-69" date="1680091200">- fixup compile error. Add function kvm_arch_accel_class_init definition on loongarch64 machine.</changelog>
  <changelog author="&lt;lixianglai@loongson.cn&gt; - 10:6.2.0-70" date="1680177600">- Add spice buildrequires for loongarch.</changelog>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-71" date="1682164800">- vhost-user-blk: fix the resize crash
- plugins: make qemu_plugin_user_exit's locking order consistent with fork_start's
- linux-user: fix strace build w/out munlockall
- ui: fix crash on serial reset, during init
- qga/win/vss: requester_freeze changes
- migration: fix populate_vfio_info
- block/rbd: workaround for ceph issue #53784
- target/i386: add FZRM, FSRS, FSRC
- i386: Add new CPU model SapphireRapids
- core/cpu-common: Fix the wrong '#ifdef __aarch64__'</changelog>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-72" date="1684324800">- migration/xbzrle: fix out-of-bounds write with axv512
- migration/xbzrle: use ctz64 to avoid undefined result
- Update bench-code for addressing CI problem
- AVX512 support for xbzrle_encode_buffer
- configure, meson: move AVX tests to meson
- target/i386: KVM: allow fast string operations if host supports them
- target/i386: add FSRM to TCG
- hw/nvme: fix memory leak in nvme_dsm
- aio-posix: fix race between epoll upgrade and aio_set_fd_handler()
- target/i386: Add SGX aex-notify and EDECCSSA support
- hw/usb/imx: Fix out of bounds access in imx_usbphy_read()
- target/i386: Set maximum APIC ID to KVM prior to vCPU creation
- target/i386: Fix sanity check on max APIC ID / X2APIC enablement</changelog>
  <changelog author="&lt;liuxiangdong5@huawei.com&gt; - 10:6.2.0-73" date="1684497600">- spec: delete useless core3-hmcode/core3-reset/uefi-bios-sw</changelog>
  <changelog author="&lt;liuxiangdong5@huawei.com&gt; - 10:6.2.0-74" date="1685016000">- spec: delete repetitive man8/qemu-ga.8* from qemu-guest-agent package</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-75" date="1688040000">- Add lbt support for kvm.
- Fix smp.cores value and Fix divide 0 error
- hw/nvme: Change alignment in dma functions for nvme_blk_*
- virtio: fix reachable assertion due to stale value of cached region size
- hw/nvme: fix missing DNR on compare failure</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-76" date="1690545600">- qga/win32: Use rundll for VSS installation
- qga/win32: Remove change action from MSI installer
- ide: Increment BB in-flight counter for TRIM BH
- hw/pci-bridge/pxb: Fix missing swizzle
- host-vdpa: make notifiers _init()/_uninit() symmetric
- hw/virtio: vdpa: Fix leak of host-notifier memory-region
- accel/tcg/cpu-exec: Fix precise single-stepping after interrupt
- Allow setting up to 8 bytes with the generic loader
- hw/net/virtio-net: make some VirtIONet const
- accel/tcg: Optimize jump cache flush during tlb range flush
- 9pfs: prevent opening special files (CVE-2023-2861)
- tcg: Reduce tcg_assert_listed_vecop() scope
- gitlab: Disable plugins for cross-i386-tci
- vfio/pci: Fix a segfault in vfio_realize
- block/iscsi: fix double-free on BUSY or similar statuses
- tests/tcg: fix unused variable in linux-test
- hw/net/vmxnet3: allow VMXNET3_MAX_MTU itself as a value
- qga/vss-win32: fix warning for clang++-15
- vnc: avoid underflow when accessing user-provided address
- block/monitor: Fix crash when executing HMP commit
- virtio-gpu: add a FIXME for virtio_gpu_load()
- hw/ppc/Kconfig: MAC_NEWWORLD should always select USB_OHCI_PCI
- migration: report compress thread pid to libvirt</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-77" date="1691409600">- test-vmstate: fix bad GTree usage, use-after-free</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-78" date="1692100800">- sw_64: Added sw64 architecture related updates
- virtio-crypto: verify src&amp;dst buffer length for sym request
- vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present
- qga: Fix suspend on Linux guests without systemd
- tests: vhost-user-test: release mutex on protocol violation
- qapi: support updating expected test output via make
- block: Fix misleading hexadecimal format
- block/rbd: fix write zeroes with growing images
- block/nbd.c: Fixed IO request coroutine not being wakeup when kill NBD server
- block/nfs: Fix 32-bit Windows build
- qapi/qdev: Tidy up device_add documentation
- hw/xen/xen_pt: fix uninitialized variable
- migration/ram: Fix error handling in ram_write_tracking_start()
- docs/about/build-platforms: Refine the distro support policy
- xen-block: Avoid leaks on new error path
- QGA VSS: Add wrapper to send log to debugger and stderr
- chardev/char-socket: set s-&gt;listener = NULL in char_socket_finalize
- qapi/block: Tidy up block-latency-histogram-set documentation
- disas/riscv Fix ctzw disassemble
- vfio: Fix vfio_get_dev_region() trace event
- migration/ram: Fix populate_read_range()
- Check and report for incomplete 'global' option  format</changelog>
</package>
<package pkgid="5a484f77d36df60e258d648f624001b2f32867cbb2b08c8548767cd82bc9e6ab" name="qemu" arch="src">
  <version epoch="10" ver="6.2.0" rel="80.oe2203sp1"/>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-71" date="1682164800">- vhost-user-blk: fix the resize crash
- plugins: make qemu_plugin_user_exit's locking order consistent with fork_start's
- linux-user: fix strace build w/out munlockall
- ui: fix crash on serial reset, during init
- qga/win/vss: requester_freeze changes
- migration: fix populate_vfio_info
- block/rbd: workaround for ceph issue #53784
- target/i386: add FZRM, FSRS, FSRC
- i386: Add new CPU model SapphireRapids
- core/cpu-common: Fix the wrong '#ifdef __aarch64__'</changelog>
  <changelog author="&lt;xufei30@huawei.com&gt; - 10:6.2.0-72" date="1684324800">- migration/xbzrle: fix out-of-bounds write with axv512
- migration/xbzrle: use ctz64 to avoid undefined result
- Update bench-code for addressing CI problem
- AVX512 support for xbzrle_encode_buffer
- configure, meson: move AVX tests to meson
- target/i386: KVM: allow fast string operations if host supports them
- target/i386: add FSRM to TCG
- hw/nvme: fix memory leak in nvme_dsm
- aio-posix: fix race between epoll upgrade and aio_set_fd_handler()
- target/i386: Add SGX aex-notify and EDECCSSA support
- hw/usb/imx: Fix out of bounds access in imx_usbphy_read()
- target/i386: Set maximum APIC ID to KVM prior to vCPU creation
- target/i386: Fix sanity check on max APIC ID / X2APIC enablement</changelog>
  <changelog author="&lt;liuxiangdong5@huawei.com&gt; - 10:6.2.0-73" date="1684497600">- spec: delete useless core3-hmcode/core3-reset/uefi-bios-sw</changelog>
  <changelog author="&lt;liuxiangdong5@huawei.com&gt; - 10:6.2.0-74" date="1685016000">- spec: delete repetitive man8/qemu-ga.8* from qemu-guest-agent package</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-75" date="1688040000">- Add lbt support for kvm.
- Fix smp.cores value and Fix divide 0 error
- hw/nvme: Change alignment in dma functions for nvme_blk_*
- virtio: fix reachable assertion due to stale value of cached region size
- hw/nvme: fix missing DNR on compare failure</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-76" date="1690545600">- qga/win32: Use rundll for VSS installation
- qga/win32: Remove change action from MSI installer
- ide: Increment BB in-flight counter for TRIM BH
- hw/pci-bridge/pxb: Fix missing swizzle
- host-vdpa: make notifiers _init()/_uninit() symmetric
- hw/virtio: vdpa: Fix leak of host-notifier memory-region
- accel/tcg/cpu-exec: Fix precise single-stepping after interrupt
- Allow setting up to 8 bytes with the generic loader
- hw/net/virtio-net: make some VirtIONet const
- accel/tcg: Optimize jump cache flush during tlb range flush
- 9pfs: prevent opening special files (CVE-2023-2861)
- tcg: Reduce tcg_assert_listed_vecop() scope
- gitlab: Disable plugins for cross-i386-tci
- vfio/pci: Fix a segfault in vfio_realize
- block/iscsi: fix double-free on BUSY or similar statuses
- tests/tcg: fix unused variable in linux-test
- hw/net/vmxnet3: allow VMXNET3_MAX_MTU itself as a value
- qga/vss-win32: fix warning for clang++-15
- vnc: avoid underflow when accessing user-provided address
- block/monitor: Fix crash when executing HMP commit
- virtio-gpu: add a FIXME for virtio_gpu_load()
- hw/ppc/Kconfig: MAC_NEWWORLD should always select USB_OHCI_PCI
- migration: report compress thread pid to libvirt</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-77" date="1691409600">- test-vmstate: fix bad GTree usage, use-after-free</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-78" date="1692100800">- sw_64: Added sw64 architecture related updates
- virtio-crypto: verify src&amp;dst buffer length for sym request
- vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present
- qga: Fix suspend on Linux guests without systemd
- tests: vhost-user-test: release mutex on protocol violation
- qapi: support updating expected test output via make
- block: Fix misleading hexadecimal format
- block/rbd: fix write zeroes with growing images
- block/nbd.c: Fixed IO request coroutine not being wakeup when kill NBD server
- block/nfs: Fix 32-bit Windows build
- qapi/qdev: Tidy up device_add documentation
- hw/xen/xen_pt: fix uninitialized variable
- migration/ram: Fix error handling in ram_write_tracking_start()
- docs/about/build-platforms: Refine the distro support policy
- xen-block: Avoid leaks on new error path
- QGA VSS: Add wrapper to send log to debugger and stderr
- chardev/char-socket: set s-&gt;listener = NULL in char_socket_finalize
- qapi/block: Tidy up block-latency-histogram-set documentation
- disas/riscv Fix ctzw disassemble
- vfio: Fix vfio_get_dev_region() trace event
- migration/ram: Fix populate_read_range()
- Check and report for incomplete 'global' option  format</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-79" date="1693224000">- test: Fix test-crypto-secret when compiling without keyring support
- aio-posix: fix build failure io_uring 2.2</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-80" date="1694260800">- io: remove io watch if TLS channel is closed during handshake
- hw/ssi: Fix Linux driver init issue with xilinx_spi
- chardev: report the handshake error
- vhost: Drop unused eventfd_add|del hooks
- virtio-iommu: use-after-free fix
- hw/arm/virt: Check for attempt to use TrustZone with KVM or HVF
- hw/rx: rx-gdbsim DTB load address aligned of 16byte
- vhost-user: Use correct macro name TARGET_PPC64
- accel/kvm: Make kvm_dirty_ring_reaper_init() void
- accel/kvm: Free as when an error occurred</changelog>
</package>
<package pkgid="cb705a3ac3a89b2ffde75020cbc35f2446221027e7e638c8d9a57e88767c935e" name="qemu" arch="src">
  <version epoch="10" ver="6.2.0" rel="83.oe2203sp1"/>
  <changelog author="&lt;liuxiangdong5@huawei.com&gt; - 10:6.2.0-74" date="1685016000">- spec: delete repetitive man8/qemu-ga.8* from qemu-guest-agent package</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-75" date="1688040000">- Add lbt support for kvm.
- Fix smp.cores value and Fix divide 0 error
- hw/nvme: Change alignment in dma functions for nvme_blk_*
- virtio: fix reachable assertion due to stale value of cached region size
- hw/nvme: fix missing DNR on compare failure</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-76" date="1690545600">- qga/win32: Use rundll for VSS installation
- qga/win32: Remove change action from MSI installer
- ide: Increment BB in-flight counter for TRIM BH
- hw/pci-bridge/pxb: Fix missing swizzle
- host-vdpa: make notifiers _init()/_uninit() symmetric
- hw/virtio: vdpa: Fix leak of host-notifier memory-region
- accel/tcg/cpu-exec: Fix precise single-stepping after interrupt
- Allow setting up to 8 bytes with the generic loader
- hw/net/virtio-net: make some VirtIONet const
- accel/tcg: Optimize jump cache flush during tlb range flush
- 9pfs: prevent opening special files (CVE-2023-2861)
- tcg: Reduce tcg_assert_listed_vecop() scope
- gitlab: Disable plugins for cross-i386-tci
- vfio/pci: Fix a segfault in vfio_realize
- block/iscsi: fix double-free on BUSY or similar statuses
- tests/tcg: fix unused variable in linux-test
- hw/net/vmxnet3: allow VMXNET3_MAX_MTU itself as a value
- qga/vss-win32: fix warning for clang++-15
- vnc: avoid underflow when accessing user-provided address
- block/monitor: Fix crash when executing HMP commit
- virtio-gpu: add a FIXME for virtio_gpu_load()
- hw/ppc/Kconfig: MAC_NEWWORLD should always select USB_OHCI_PCI
- migration: report compress thread pid to libvirt</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-77" date="1691409600">- test-vmstate: fix bad GTree usage, use-after-free</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-78" date="1692100800">- sw_64: Added sw64 architecture related updates
- virtio-crypto: verify src&amp;dst buffer length for sym request
- vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present
- qga: Fix suspend on Linux guests without systemd
- tests: vhost-user-test: release mutex on protocol violation
- qapi: support updating expected test output via make
- block: Fix misleading hexadecimal format
- block/rbd: fix write zeroes with growing images
- block/nbd.c: Fixed IO request coroutine not being wakeup when kill NBD server
- block/nfs: Fix 32-bit Windows build
- qapi/qdev: Tidy up device_add documentation
- hw/xen/xen_pt: fix uninitialized variable
- migration/ram: Fix error handling in ram_write_tracking_start()
- docs/about/build-platforms: Refine the distro support policy
- xen-block: Avoid leaks on new error path
- QGA VSS: Add wrapper to send log to debugger and stderr
- chardev/char-socket: set s-&gt;listener = NULL in char_socket_finalize
- qapi/block: Tidy up block-latency-histogram-set documentation
- disas/riscv Fix ctzw disassemble
- vfio: Fix vfio_get_dev_region() trace event
- migration/ram: Fix populate_read_range()
- Check and report for incomplete 'global' option  format</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-79" date="1693224000">- test: Fix test-crypto-secret when compiling without keyring support
- aio-posix: fix build failure io_uring 2.2</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-80" date="1694260800">- io: remove io watch if TLS channel is closed during handshake
- hw/ssi: Fix Linux driver init issue with xilinx_spi
- chardev: report the handshake error
- vhost: Drop unused eventfd_add|del hooks
- virtio-iommu: use-after-free fix
- hw/arm/virt: Check for attempt to use TrustZone with KVM or HVF
- hw/rx: rx-gdbsim DTB load address aligned of 16byte
- vhost-user: Use correct macro name TARGET_PPC64
- accel/kvm: Make kvm_dirty_ring_reaper_init() void
- accel/kvm: Free as when an error occurred</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-81" date="1698667200">- hw/nvme: Avoid dynamic stack allocation
- ppc/vof: Fix missed fields in VOF cleanup
- ui: fix crash when there are no active_console
- tests/qtest/pflash: Clean up local variable shadowing
- target/ppc: Fix the order of kvm_enable judgment about kvmppc_set_interrupt()
- tulip: Assign default MAC address if not specified
- hw/char: fix qcode array bounds check in ESCC impl</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-82" date="1698667201">- thread-pool: optimize scheduling of completion bottom half
- migration/rdma: zore out head.repeat to make the error more clear
- vhost-user-fs: Back up vqs before cleaning up vhost_dev
- hw/vfio/pci-quirks: Sanitize capability pointer
- hw/vfio/pci-quirks: Support alternate offset for GPUDirect Cliques
- replay: fix event queue flush for qemu shutdown
- hw/net: Fix read of uninitialized memory in ftgmac100
- target/ppc: Fix tlbie
- target/i386: fix INVD vmexit
- qtest/npcm7xx_pwm-test: Fix memory leak in mft_qom_set
- aio-posix: zero out io_uring sqe user_data</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-83" date="1698667202">- hw/virtio/virtio-pmem: Replace impossible check by assertion
- tests: Fix printf format string in acpi-utils.c
- softmmu/dirtylimit: Add parameter check for hmp "set_vcpu_dirty_limit"
- disas/riscv: Fix the typo of inverted order of pmpaddr13 and pmpaddr14
- qga: Fix memory leak when output stream is unused
- ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
- target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
- target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
- target/i386: Allow MCDT_NO if host supports
- target/i386: Add support for MCDT_NO in CPUID enumeration
- target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
- target/i386: add support for FB_CLEAR feature
- target/i386: add support for FLUSH_L1D feature
- crypto: remove shadowed 'ret' variable
- hw/i2c/pmbus_device: Fix modifying QOM class internals from instance
- hw/arm/xlnx-zynqmp: fix unsigned error when checking the RPUs number</changelog>
</package>
<package pkgid="d0b4a6fc52517629672ea25c71bccadc2bab5363ed9470e1a6f5a234b3a8d3df" name="qemu" arch="src">
  <version epoch="10" ver="6.2.0" rel="86.oe2203sp1"/>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-77" date="1691409600">- test-vmstate: fix bad GTree usage, use-after-free</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-78" date="1692100800">- sw_64: Added sw64 architecture related updates
- virtio-crypto: verify src&amp;dst buffer length for sym request
- vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present
- qga: Fix suspend on Linux guests without systemd
- tests: vhost-user-test: release mutex on protocol violation
- qapi: support updating expected test output via make
- block: Fix misleading hexadecimal format
- block/rbd: fix write zeroes with growing images
- block/nbd.c: Fixed IO request coroutine not being wakeup when kill NBD server
- block/nfs: Fix 32-bit Windows build
- qapi/qdev: Tidy up device_add documentation
- hw/xen/xen_pt: fix uninitialized variable
- migration/ram: Fix error handling in ram_write_tracking_start()
- docs/about/build-platforms: Refine the distro support policy
- xen-block: Avoid leaks on new error path
- QGA VSS: Add wrapper to send log to debugger and stderr
- chardev/char-socket: set s-&gt;listener = NULL in char_socket_finalize
- qapi/block: Tidy up block-latency-histogram-set documentation
- disas/riscv Fix ctzw disassemble
- vfio: Fix vfio_get_dev_region() trace event
- migration/ram: Fix populate_read_range()
- Check and report for incomplete 'global' option  format</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-79" date="1693224000">- test: Fix test-crypto-secret when compiling without keyring support
- aio-posix: fix build failure io_uring 2.2</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-80" date="1694260800">- io: remove io watch if TLS channel is closed during handshake
- hw/ssi: Fix Linux driver init issue with xilinx_spi
- chardev: report the handshake error
- vhost: Drop unused eventfd_add|del hooks
- virtio-iommu: use-after-free fix
- hw/arm/virt: Check for attempt to use TrustZone with KVM or HVF
- hw/rx: rx-gdbsim DTB load address aligned of 16byte
- vhost-user: Use correct macro name TARGET_PPC64
- accel/kvm: Make kvm_dirty_ring_reaper_init() void
- accel/kvm: Free as when an error occurred</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-81" date="1698667200">- hw/nvme: Avoid dynamic stack allocation
- ppc/vof: Fix missed fields in VOF cleanup
- ui: fix crash when there are no active_console
- tests/qtest/pflash: Clean up local variable shadowing
- target/ppc: Fix the order of kvm_enable judgment about kvmppc_set_interrupt()
- tulip: Assign default MAC address if not specified
- hw/char: fix qcode array bounds check in ESCC impl</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-82" date="1698667201">- thread-pool: optimize scheduling of completion bottom half
- migration/rdma: zore out head.repeat to make the error more clear
- vhost-user-fs: Back up vqs before cleaning up vhost_dev
- hw/vfio/pci-quirks: Sanitize capability pointer
- hw/vfio/pci-quirks: Support alternate offset for GPUDirect Cliques
- replay: fix event queue flush for qemu shutdown
- hw/net: Fix read of uninitialized memory in ftgmac100
- target/ppc: Fix tlbie
- target/i386: fix INVD vmexit
- qtest/npcm7xx_pwm-test: Fix memory leak in mft_qom_set
- aio-posix: zero out io_uring sqe user_data</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-83" date="1698667202">- hw/virtio/virtio-pmem: Replace impossible check by assertion
- tests: Fix printf format string in acpi-utils.c
- softmmu/dirtylimit: Add parameter check for hmp "set_vcpu_dirty_limit"
- disas/riscv: Fix the typo of inverted order of pmpaddr13 and pmpaddr14
- qga: Fix memory leak when output stream is unused
- ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
- target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
- target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
- target/i386: Allow MCDT_NO if host supports
- target/i386: Add support for MCDT_NO in CPUID enumeration
- target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
- target/i386: add support for FB_CLEAR feature
- target/i386: add support for FLUSH_L1D feature
- crypto: remove shadowed 'ret' variable
- hw/i2c/pmbus_device: Fix modifying QOM class internals from instance
- hw/arm/xlnx-zynqmp: fix unsigned error when checking the RPUs number</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-84" date="1701172800">- hw/arm/fsl-imx: Do not ignore Error argument
- hw/net/cadence_gem.c: spelling fixes: Octects
- tests/qtest: check the return value
- libvhost-user: Fix VHOST_USER_GET_MAX_MEM_SLOTS  reply mainline inclusion commit 69a5daec06f423843ce1bb9be5fb049314996f78 category: bugfix
- io_uring: fix short read slow path mainline inclusion commit c06fc7ce147e57ab493bad9263f1601b8298484b category: bugfix
- libvhost-user: Fix VHOST_USER_ADD_MEM_REG reply mainline inclusion commit 7f27d20ded2f480f3e66d03f90ea71507b834276 category: bugfix
- qsd: Unlink absolute PID file path mainline inclusion commit 9d8f8233b9fa525a7e37350fbc18877051128c5d category: bugfix
- net: Fix a misleading error message
- vdpa: stop all svq on device deletion
- vhost: release virtqueue objects in error path
- vhost: fix the fd leak
- virtio: i2c: Check notifier helpers for VIRTIO_CONFIG_IRQ_IDX
- hw/virtio: fix typo in VIRTIO_CONFIG_IRQ_IDX comments
- virtio-net: clear guest_announce feature if no cvq backend
- vdpa: fix VHOST_BACKEND_F_IOTLB_ASID flag check
- vdpa: do not block migration if device has cvq and x-svq=on
- vdpa net: block migration if the device has CVQ
- vdpa: Return -EIO if device ack is VIRTIO_NET_ERR in _load_mq()
- vdpa: Return -EIO if device ack is VIRTIO_NET_ERR in _load_mac()
- vdpa: fix not using CVQ buffer in case of error
- vdpa: Fix possible use-after-free for VirtQueueElement
- hw/virtio: fix vhost_user_read tracepoint
- vhost: Fix false positive out-of-bounds
- vhost: fix possible wrap in SVQ descriptor ring
- vhost: move iova_tree set to vhost_svq_start
- vhost: Always store new kick fd on vhost_svq_set_svq_kick_fd
- virtio-crypto: verify src&amp;dst buffer length for sym request
- vdpa: commit all host notifier MRs in a single MR transaction
- vdpa: harden the error path if get_iova_range failed
- vdpa-dev: get iova range explicitly
- virtio-pci: add support for configure interrupt
- virtio-mmio: add support for configure interrupt
- virtio-net: add support for configure interrupt
- vhost: add support for configure interrupt
- virtio: add support for configure interrupt
- vhost-vdpa: add support for config interrupt
- vhost: introduce new VhostOps vhost_set_config_call
- virtio-pci: decouple the single vector from the interrupt process
- virtio-pci: decouple notifier from interrupt process
- virtio: introduce macro VIRTIO_CONFIG_IRQ_IDX
- vdpa: do not handle VIRTIO_NET_F_GUEST_ANNOUNCE in vhost-vdpa
- vdpa: handle VIRTIO_NET_CTRL_ANNOUNCE in vhost_vdpa_net_handle_ctrl_avail
- vhost: fix vq dirty bitmap syncing when vIOMMU is enabled
- hw/virtio: gracefully handle unset vhost_dev vdev
- hw/virtio/vhost: Fix typo in comment.
- vdpa: always start CVQ in SVQ mode if possible
- vdpa: add shadow_data to vhost_vdpa
- vdpa: store x-svq parameter in VhostVDPAState
- vdpa: add asid parameter to vhost_vdpa_dma_map/unmap
- vdpa: allocate SVQ array unconditionally
- vdpa: move SVQ vring features check to net/
- vdpa: request iova_range only once
- vdpa: add vhost_vdpa_net_valid_svq_features
- vhost: allocate SVQ device file descriptors at device start
- vhost: set SVQ device call handler at SVQ start
- vdpa: use v-&gt;shadow_vqs_enabled in vhost_vdpa_svqs_start &amp; stop
- vhost: enable vrings in vhost_dev_start() for vhost-user devices
- vhost-vdpa: fix assert !virtio_net_get_subqueue(nc)-&gt;async_tx.elem in virtio_net_reset
- net/vhost-vdpa.c: Fix clang compilation failure
- vhost-vdpa: allow passing opened vhostfd to vhost-vdpa
- vdpa: Remove shadow CVQ command check
- vdpa: Delete duplicated vdpa_feature_bits entry
- hw/virtio: add some vhost-user trace events
- vdpa: Allow MQ feature in SVQ
- virtio-net: Update virtio-net curr_queue_pairs in vdpa backends
- vdpa: validate MQ CVQ commands
- vdpa: Add vhost_vdpa_net_load_mq
- vdpa: extract vhost_vdpa_net_load_mac from vhost_vdpa_net_load
- vdpa: Make VhostVDPAState cvq_cmd_in_buffer control ack type
- vdpa: Delete CVQ migration blocker
- vdpa: Add virtio-net mac address via CVQ at start
- vhost_net: add NetClientState-&gt;load() callback
- vdpa: extract vhost_vdpa_net_cvq_add from vhost_vdpa_net_handle_ctrl_avail
- vdpa: Move command buffers map to start of net device
- vdpa: add net_vhost_vdpa_cvq_info NetClientInfo
- vhost_net: Add NetClientInfo stop callback
- vhost_net: Add NetClientInfo start callback
- vdpa: Use ring hwaddr at vhost_vdpa_svq_unmap_ring
- vdpa: Make SVQ vring unmapping return void
- vdpa: Remove SVQ vring from iova_tree at shutdown
- util: accept iova_tree_remove_parameter by value
- vdpa: do not save failed dma maps in SVQ iova tree
- vdpa: Skip the maps not in the iova tree
- vdpa: Fix file descriptor leak on get features error
- vdpa: Fix memory listener deletions of iova tree
- vhost: Get vring base from vq, not svq
- vdpa: Add x-svq to NetdevVhostVDPAOptions
- vdpa: Add device migration blocker
- vdpa: Extract get features part from vhost_vdpa_get_max_queue_pairs
- vdpa: Buffer CVQ support on shadow virtqueue
- vdpa: manual forward CVQ buffers
- vdpa: Export vhost_vdpa_dma_map and unmap calls
- vhost: Add svq avail_handler callback
- vhost: add vhost_svq_poll
- vhost: Expose vhost_svq_add
- vhost: add vhost_svq_push_elem
- vhost: Track number of descs in SVQDescState
- vhost: Add SVQDescState
- vhost: Decouple vhost_svq_add from VirtQueueElement
- vhost: Check for queue full at vhost_svq_add
- vhost: Move vhost_svq_kick call to vhost_svq_add
- vhost: Reorder vhost_svq_kick
- vdpa: Avoid compiler to squash reads to used idx
- virtio-net: Expose ctrl virtqueue logic
- virtio-net: Expose MAC_TABLE_ENTRIES
- vhost: move descriptor translation to vhost_svq_vring_write_descs
- util: Return void on iova_tree_remove
- virtio-net: don't handle mq request in userspace handler for vhost-vdpa
- vhost-vdpa: change name and polarity for vhost_vdpa_one_time_request()
- vhost-vdpa: backend feature should set only once
- vhost-vdpa: fix improper cleanup in net_init_vhost_vdpa
- virtio-net: align ctrl_vq index for non-mq guest for vhost_vdpa
- virtio: add vhost support for virtio devices
- include/hw: start documenting the vhost API
- hw/virtio: add vhost_user_[read|write] trace points
- vhost: Fix element in vhost_svq_add failure
- vdpa: Fix index calculus at vhost_vdpa_svqs_start
- vdpa: Fix bad index calculus at vhost_vdpa_get_vring_base
- vhost: Fix device's used descriptor dequeue
- vhost: Track descriptor chain in private at SVQ
- vdpa: Add missing tracing to batch mapping functions
- vhost-vdpa: fix typo in a comment
- virtio: fix --enable-vhost-user build on non-Linux
- vdpa: Expose VHOST_F_LOG_ALL on SVQ
- vdpa: Never set log_base addr if SVQ is enabled
- vdpa: Adapt vhost_vdpa_get_vring_base to SVQ
- vdpa: Add custom IOTLB translations to SVQ
- vhost: Add VhostIOVATree
- util: add iova_tree_find_iova
- util: Add iova_tree_alloc_map
- vhost: Shadow virtqueue buffers forwarding
- vdpa: adapt vhost_ops callbacks to svq
- virtio: Add vhost_svq_get_vring_addr
- vhost: Add vhost_svq_valid_features to shadow vq
- vhost: Add Shadow VirtQueue call forwarding capabilities
- vhost: Add Shadow VirtQueue kick forwarding capabilities
- vhost: Add VhostShadowVirtqueue
- vdpa: Make ncs autofree
- Revert "virtio: introduce macro IRTIO_CONFIG_IRQ_IDX"
- Revert "virtio-pci: decouple notifier from interrupt process"
- Revert "virtio-pci: decouple the single vector from the interrupt process"
- Revert "vhost-vdpa: add support for config interrupt"
- Revert "virtio: add support for configure interrupt"
- Revert "vhost: add support for configure interrupt"
- Revert "virtio-net: add support for configure interrupt"
- Revert "virtio-mmio: add support for configure interrupt"
- Revert "virtio-pci: add support for configure interrupt"
- Revert "vhost: introduce new VhostOps vhost_set_config_call"
- virtio: signal after wrapping packed used_idx
- target/i386: Adjust feature level according to FEAT_7_1_EDX
- target/i386: Add new CPU model GraniteRapids
- target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
- target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
- target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
- target/i386: Add support for AVX-IFMA in CPUID enumeration
- target/i386: Add support for AMX-FP16 in CPUID enumeration
- target/i386: Add support for CMPCCXADD in CPUID enumeration
- tracetool: avoid invalid escape in Python string
- hw/pvrdma: Protect against buggy or malicious guest driver
- vga: avoid crash if no default vga card mainline inclusion commit 6985d8ede92494f3b791de01e8ee9306eb6d5e4a category: bugfix
- qom/object: Remove circular include dependency mainline inclusion commit 5bba9bcfbb42e7c016626420e148a1bf1b080835 category: bugfix
- artist: set memory region owners for buffers to the  artist device mainline inclusion commit 39fbaeca096a9bf6cbe2af88572c1cb2aa62aa8c category: bugfix
- virtio-iommu: Fix the partial copy of probe request mainline inclusion commit 45461aace83d961e933b27519b81d17b4c690514 category: bugfix
- e1000: set RX descriptor status in a separate  operation mainline inclusion commit 034d00d4858161e1d4cff82d8d230bce874a04d3 category: bugfix
- vhost: introduce new VhostOps vhost_set_config_call
- vhost: stick to -errno error return convention
- vhost-user: stick to -errno error return convention
- vhost-vdpa: stick to -errno error return convention
- virtio-pci: add support for configure interrupt
- virtio-mmio: add support for configure interrupt
- virtio-net: add support for configure interrupt
- vhost: add support for configure interrupt
- virtio: add support for configure interrupt
- vhost-vdpa: add support for config interrupt
- virtio-pci: decouple the single vector from the interrupt process
- virtio-pci: decouple notifier from interrupt process
- virtio: introduce macro IRTIO_CONFIG_IRQ_IDX
- pci: Fix the update of interrupt disable bit in PCI_COMMAND register
- hw/timer/npcm7xx_timer: Prevent timer from counting down past zero
- tpm_crb: mark command buffer as dirty on request  completion mainline inclusion commit e37a0ef4605e5d2041785ff3fc89ca6021faf7a0 category: bugfix
- pci: fix overflow in snprintf string formatting mainline inclusion commit 36f18c6989a3d1ff1d7a0e50b0868ef3958299b4 category: bugfix
- hw/usb/hcd-ehci: fix writeback order mainline inclusion commit f471e8b060798f26a7fc339c6152f82f22a7b33d category: bugfix
- qemu-timer: Skip empty timer lists before locking  in qemu_clock_deadline_ns_all mainline inclusion commit 3f42906c9ab2c777a895b48b87b8107167e4a275 category: bugfix
- semihosting/config: Merge --semihosting-config  option groups mainline inclusion commit 90c072e063737e9e8f431489bbd334452f89056e category: bugfix
- semihosting: fix memleak at semihosting_arg_fallback
- target/i386: Export GDS_NO bit to guests</changelog>
  <changelog author="&lt;chunfu.jian@shingroup.cn&gt; - 10:6.2.0-85" date="1701432000">- spec: Add support for the ppc64le platform</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-86" date="1701777600">- vdpa: move memory listener to the realize stage
- vdpa: implement vdpa device migration
- vhost: implement post resume bh
- vhost: implement migration state notifier for vdpa device
- vhost: implement savevm_hanlder for vdpa device
- vhost: implement vhost_vdpa_device_suspend/resume
- vhost: implement vhost-vdpa suspend/resume
- vhost: add vhost_dev_suspend/resume_op
- vhost: introduce bytemap for vhost backend logging
- vhost-vdpa: add migration log ops for VhostOps
- vhost-vdpa: add VHOST_BACKEND_F_BYTEMAPLOG
- vhost: fix null pointer access
- ui/gtk: prevent ui lock up when dpy_gl_update called again before current draw event occurs
- hw/usb: dev-mtp: Use g_mkdir()
- target/ppc/cpu-models: Remove the "default" CPU alias
- hw/intc/arm_gicv3: ICC_PMR_EL1 high bits should be RAZ
- Fixed a QEMU hang when guest poweroff in COLO mode
- migration/colo: More accurate update checkpoint time
- scripts/entitlement.sh: Use backward-compatible cp flags
- block/nvme: fix infinite loop in nvme_free_req_queue_cb()
- hw/net: npcm7xx_emc fix missing queue_flush
- Add dummy Aspeed AST2600 Display Port MCU (DPMCU)
- hw/arm: ast2600: Fix address mapping of second SPI controller
- vhost-user-blk: reconnect on any error during realize
- vhost-user-blk: propagate error return from generic vhost
- hw/riscv: boot: Reduce FDT address alignment constraints
- Revert "hw/virtio/virtio-iommu-pci: Enforce the device is plugged on the root bus"
- Fix STM32F2XX USART data register readout
- block: use 'unsigned' for in_flight field on driver state
- sphinx: change default language to 'en'
- tests/qtest: Fix two format strings
- trivial typos: namesapce
- hw/ide/atapi.c: Correct typos (CD-CDROM -&gt; CD-ROM)
- hw/virtio/virtio-iommu-pci: Enforce the device is plugged on the root bus
- hw/display/next-fb: Fix comment typo
- xen/pass-through: merge emulated bits correctly mainline inclusion commit be9c61da9fc57eb7d293f380d0805ca6f46c2657 category: bugfix
- tests/qtest/migration-test.c: spelling fix: bandwith
- target/i386/cpu: Improve error message for property "vendor"
- balloon: Fix a misleading error message
- target/arm: Don't set syndrome ISS for loads and  stores with writeback mainline inclusion commit 53ae2fdef1f5661cbaa2ea571c517f98e6041cb8 category: bugfix
- disas/hppa: Show hexcode of instruction along with disassembly
- tcg/loongarch64: Fix tcg_out_mov() Aborted
- ui/qmp-cmds: Improve two error messages
- qga: Improve guest-exec-status error message
- hmp: Improve sync-profile error message
- spapr/pci: Correct "does not support hotplugging error messages
- xen/pass-through: don't create needless register  group mainline inclusion commit c0e86b7624cb9d6db03e0d48cf82659e5b89a6a6 category: bugfix</changelog>
</package>
<package pkgid="365889b20dcb31698c6c5a7ff9fb6d5c395ab1cbcfbf1cf9b895f683adf5bb4a" name="qemu" arch="src">
  <version epoch="10" ver="6.2.0" rel="89.oe2203sp1"/>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-80" date="1694260800">- io: remove io watch if TLS channel is closed during handshake
- hw/ssi: Fix Linux driver init issue with xilinx_spi
- chardev: report the handshake error
- vhost: Drop unused eventfd_add|del hooks
- virtio-iommu: use-after-free fix
- hw/arm/virt: Check for attempt to use TrustZone with KVM or HVF
- hw/rx: rx-gdbsim DTB load address aligned of 16byte
- vhost-user: Use correct macro name TARGET_PPC64
- accel/kvm: Make kvm_dirty_ring_reaper_init() void
- accel/kvm: Free as when an error occurred</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-81" date="1698667200">- hw/nvme: Avoid dynamic stack allocation
- ppc/vof: Fix missed fields in VOF cleanup
- ui: fix crash when there are no active_console
- tests/qtest/pflash: Clean up local variable shadowing
- target/ppc: Fix the order of kvm_enable judgment about kvmppc_set_interrupt()
- tulip: Assign default MAC address if not specified
- hw/char: fix qcode array bounds check in ESCC impl</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-82" date="1698667201">- thread-pool: optimize scheduling of completion bottom half
- migration/rdma: zore out head.repeat to make the error more clear
- vhost-user-fs: Back up vqs before cleaning up vhost_dev
- hw/vfio/pci-quirks: Sanitize capability pointer
- hw/vfio/pci-quirks: Support alternate offset for GPUDirect Cliques
- replay: fix event queue flush for qemu shutdown
- hw/net: Fix read of uninitialized memory in ftgmac100
- target/ppc: Fix tlbie
- target/i386: fix INVD vmexit
- qtest/npcm7xx_pwm-test: Fix memory leak in mft_qom_set
- aio-posix: zero out io_uring sqe user_data</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-83" date="1698667202">- hw/virtio/virtio-pmem: Replace impossible check by assertion
- tests: Fix printf format string in acpi-utils.c
- softmmu/dirtylimit: Add parameter check for hmp "set_vcpu_dirty_limit"
- disas/riscv: Fix the typo of inverted order of pmpaddr13 and pmpaddr14
- qga: Fix memory leak when output stream is unused
- ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
- target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
- target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
- target/i386: Allow MCDT_NO if host supports
- target/i386: Add support for MCDT_NO in CPUID enumeration
- target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
- target/i386: add support for FB_CLEAR feature
- target/i386: add support for FLUSH_L1D feature
- crypto: remove shadowed 'ret' variable
- hw/i2c/pmbus_device: Fix modifying QOM class internals from instance
- hw/arm/xlnx-zynqmp: fix unsigned error when checking the RPUs number</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-84" date="1701172800">- hw/arm/fsl-imx: Do not ignore Error argument
- hw/net/cadence_gem.c: spelling fixes: Octects
- tests/qtest: check the return value
- libvhost-user: Fix VHOST_USER_GET_MAX_MEM_SLOTS  reply mainline inclusion commit 69a5daec06f423843ce1bb9be5fb049314996f78 category: bugfix
- io_uring: fix short read slow path mainline inclusion commit c06fc7ce147e57ab493bad9263f1601b8298484b category: bugfix
- libvhost-user: Fix VHOST_USER_ADD_MEM_REG reply mainline inclusion commit 7f27d20ded2f480f3e66d03f90ea71507b834276 category: bugfix
- qsd: Unlink absolute PID file path mainline inclusion commit 9d8f8233b9fa525a7e37350fbc18877051128c5d category: bugfix
- net: Fix a misleading error message
- vdpa: stop all svq on device deletion
- vhost: release virtqueue objects in error path
- vhost: fix the fd leak
- virtio: i2c: Check notifier helpers for VIRTIO_CONFIG_IRQ_IDX
- hw/virtio: fix typo in VIRTIO_CONFIG_IRQ_IDX comments
- virtio-net: clear guest_announce feature if no cvq backend
- vdpa: fix VHOST_BACKEND_F_IOTLB_ASID flag check
- vdpa: do not block migration if device has cvq and x-svq=on
- vdpa net: block migration if the device has CVQ
- vdpa: Return -EIO if device ack is VIRTIO_NET_ERR in _load_mq()
- vdpa: Return -EIO if device ack is VIRTIO_NET_ERR in _load_mac()
- vdpa: fix not using CVQ buffer in case of error
- vdpa: Fix possible use-after-free for VirtQueueElement
- hw/virtio: fix vhost_user_read tracepoint
- vhost: Fix false positive out-of-bounds
- vhost: fix possible wrap in SVQ descriptor ring
- vhost: move iova_tree set to vhost_svq_start
- vhost: Always store new kick fd on vhost_svq_set_svq_kick_fd
- virtio-crypto: verify src&amp;dst buffer length for sym request
- vdpa: commit all host notifier MRs in a single MR transaction
- vdpa: harden the error path if get_iova_range failed
- vdpa-dev: get iova range explicitly
- virtio-pci: add support for configure interrupt
- virtio-mmio: add support for configure interrupt
- virtio-net: add support for configure interrupt
- vhost: add support for configure interrupt
- virtio: add support for configure interrupt
- vhost-vdpa: add support for config interrupt
- vhost: introduce new VhostOps vhost_set_config_call
- virtio-pci: decouple the single vector from the interrupt process
- virtio-pci: decouple notifier from interrupt process
- virtio: introduce macro VIRTIO_CONFIG_IRQ_IDX
- vdpa: do not handle VIRTIO_NET_F_GUEST_ANNOUNCE in vhost-vdpa
- vdpa: handle VIRTIO_NET_CTRL_ANNOUNCE in vhost_vdpa_net_handle_ctrl_avail
- vhost: fix vq dirty bitmap syncing when vIOMMU is enabled
- hw/virtio: gracefully handle unset vhost_dev vdev
- hw/virtio/vhost: Fix typo in comment.
- vdpa: always start CVQ in SVQ mode if possible
- vdpa: add shadow_data to vhost_vdpa
- vdpa: store x-svq parameter in VhostVDPAState
- vdpa: add asid parameter to vhost_vdpa_dma_map/unmap
- vdpa: allocate SVQ array unconditionally
- vdpa: move SVQ vring features check to net/
- vdpa: request iova_range only once
- vdpa: add vhost_vdpa_net_valid_svq_features
- vhost: allocate SVQ device file descriptors at device start
- vhost: set SVQ device call handler at SVQ start
- vdpa: use v-&gt;shadow_vqs_enabled in vhost_vdpa_svqs_start &amp; stop
- vhost: enable vrings in vhost_dev_start() for vhost-user devices
- vhost-vdpa: fix assert !virtio_net_get_subqueue(nc)-&gt;async_tx.elem in virtio_net_reset
- net/vhost-vdpa.c: Fix clang compilation failure
- vhost-vdpa: allow passing opened vhostfd to vhost-vdpa
- vdpa: Remove shadow CVQ command check
- vdpa: Delete duplicated vdpa_feature_bits entry
- hw/virtio: add some vhost-user trace events
- vdpa: Allow MQ feature in SVQ
- virtio-net: Update virtio-net curr_queue_pairs in vdpa backends
- vdpa: validate MQ CVQ commands
- vdpa: Add vhost_vdpa_net_load_mq
- vdpa: extract vhost_vdpa_net_load_mac from vhost_vdpa_net_load
- vdpa: Make VhostVDPAState cvq_cmd_in_buffer control ack type
- vdpa: Delete CVQ migration blocker
- vdpa: Add virtio-net mac address via CVQ at start
- vhost_net: add NetClientState-&gt;load() callback
- vdpa: extract vhost_vdpa_net_cvq_add from vhost_vdpa_net_handle_ctrl_avail
- vdpa: Move command buffers map to start of net device
- vdpa: add net_vhost_vdpa_cvq_info NetClientInfo
- vhost_net: Add NetClientInfo stop callback
- vhost_net: Add NetClientInfo start callback
- vdpa: Use ring hwaddr at vhost_vdpa_svq_unmap_ring
- vdpa: Make SVQ vring unmapping return void
- vdpa: Remove SVQ vring from iova_tree at shutdown
- util: accept iova_tree_remove_parameter by value
- vdpa: do not save failed dma maps in SVQ iova tree
- vdpa: Skip the maps not in the iova tree
- vdpa: Fix file descriptor leak on get features error
- vdpa: Fix memory listener deletions of iova tree
- vhost: Get vring base from vq, not svq
- vdpa: Add x-svq to NetdevVhostVDPAOptions
- vdpa: Add device migration blocker
- vdpa: Extract get features part from vhost_vdpa_get_max_queue_pairs
- vdpa: Buffer CVQ support on shadow virtqueue
- vdpa: manual forward CVQ buffers
- vdpa: Export vhost_vdpa_dma_map and unmap calls
- vhost: Add svq avail_handler callback
- vhost: add vhost_svq_poll
- vhost: Expose vhost_svq_add
- vhost: add vhost_svq_push_elem
- vhost: Track number of descs in SVQDescState
- vhost: Add SVQDescState
- vhost: Decouple vhost_svq_add from VirtQueueElement
- vhost: Check for queue full at vhost_svq_add
- vhost: Move vhost_svq_kick call to vhost_svq_add
- vhost: Reorder vhost_svq_kick
- vdpa: Avoid compiler to squash reads to used idx
- virtio-net: Expose ctrl virtqueue logic
- virtio-net: Expose MAC_TABLE_ENTRIES
- vhost: move descriptor translation to vhost_svq_vring_write_descs
- util: Return void on iova_tree_remove
- virtio-net: don't handle mq request in userspace handler for vhost-vdpa
- vhost-vdpa: change name and polarity for vhost_vdpa_one_time_request()
- vhost-vdpa: backend feature should set only once
- vhost-vdpa: fix improper cleanup in net_init_vhost_vdpa
- virtio-net: align ctrl_vq index for non-mq guest for vhost_vdpa
- virtio: add vhost support for virtio devices
- include/hw: start documenting the vhost API
- hw/virtio: add vhost_user_[read|write] trace points
- vhost: Fix element in vhost_svq_add failure
- vdpa: Fix index calculus at vhost_vdpa_svqs_start
- vdpa: Fix bad index calculus at vhost_vdpa_get_vring_base
- vhost: Fix device's used descriptor dequeue
- vhost: Track descriptor chain in private at SVQ
- vdpa: Add missing tracing to batch mapping functions
- vhost-vdpa: fix typo in a comment
- virtio: fix --enable-vhost-user build on non-Linux
- vdpa: Expose VHOST_F_LOG_ALL on SVQ
- vdpa: Never set log_base addr if SVQ is enabled
- vdpa: Adapt vhost_vdpa_get_vring_base to SVQ
- vdpa: Add custom IOTLB translations to SVQ
- vhost: Add VhostIOVATree
- util: add iova_tree_find_iova
- util: Add iova_tree_alloc_map
- vhost: Shadow virtqueue buffers forwarding
- vdpa: adapt vhost_ops callbacks to svq
- virtio: Add vhost_svq_get_vring_addr
- vhost: Add vhost_svq_valid_features to shadow vq
- vhost: Add Shadow VirtQueue call forwarding capabilities
- vhost: Add Shadow VirtQueue kick forwarding capabilities
- vhost: Add VhostShadowVirtqueue
- vdpa: Make ncs autofree
- Revert "virtio: introduce macro IRTIO_CONFIG_IRQ_IDX"
- Revert "virtio-pci: decouple notifier from interrupt process"
- Revert "virtio-pci: decouple the single vector from the interrupt process"
- Revert "vhost-vdpa: add support for config interrupt"
- Revert "virtio: add support for configure interrupt"
- Revert "vhost: add support for configure interrupt"
- Revert "virtio-net: add support for configure interrupt"
- Revert "virtio-mmio: add support for configure interrupt"
- Revert "virtio-pci: add support for configure interrupt"
- Revert "vhost: introduce new VhostOps vhost_set_config_call"
- virtio: signal after wrapping packed used_idx
- target/i386: Adjust feature level according to FEAT_7_1_EDX
- target/i386: Add new CPU model GraniteRapids
- target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
- target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
- target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
- target/i386: Add support for AVX-IFMA in CPUID enumeration
- target/i386: Add support for AMX-FP16 in CPUID enumeration
- target/i386: Add support for CMPCCXADD in CPUID enumeration
- tracetool: avoid invalid escape in Python string
- hw/pvrdma: Protect against buggy or malicious guest driver
- vga: avoid crash if no default vga card mainline inclusion commit 6985d8ede92494f3b791de01e8ee9306eb6d5e4a category: bugfix
- qom/object: Remove circular include dependency mainline inclusion commit 5bba9bcfbb42e7c016626420e148a1bf1b080835 category: bugfix
- artist: set memory region owners for buffers to the  artist device mainline inclusion commit 39fbaeca096a9bf6cbe2af88572c1cb2aa62aa8c category: bugfix
- virtio-iommu: Fix the partial copy of probe request mainline inclusion commit 45461aace83d961e933b27519b81d17b4c690514 category: bugfix
- e1000: set RX descriptor status in a separate  operation mainline inclusion commit 034d00d4858161e1d4cff82d8d230bce874a04d3 category: bugfix
- vhost: introduce new VhostOps vhost_set_config_call
- vhost: stick to -errno error return convention
- vhost-user: stick to -errno error return convention
- vhost-vdpa: stick to -errno error return convention
- virtio-pci: add support for configure interrupt
- virtio-mmio: add support for configure interrupt
- virtio-net: add support for configure interrupt
- vhost: add support for configure interrupt
- virtio: add support for configure interrupt
- vhost-vdpa: add support for config interrupt
- virtio-pci: decouple the single vector from the interrupt process
- virtio-pci: decouple notifier from interrupt process
- virtio: introduce macro IRTIO_CONFIG_IRQ_IDX
- pci: Fix the update of interrupt disable bit in PCI_COMMAND register
- hw/timer/npcm7xx_timer: Prevent timer from counting down past zero
- tpm_crb: mark command buffer as dirty on request  completion mainline inclusion commit e37a0ef4605e5d2041785ff3fc89ca6021faf7a0 category: bugfix
- pci: fix overflow in snprintf string formatting mainline inclusion commit 36f18c6989a3d1ff1d7a0e50b0868ef3958299b4 category: bugfix
- hw/usb/hcd-ehci: fix writeback order mainline inclusion commit f471e8b060798f26a7fc339c6152f82f22a7b33d category: bugfix
- qemu-timer: Skip empty timer lists before locking  in qemu_clock_deadline_ns_all mainline inclusion commit 3f42906c9ab2c777a895b48b87b8107167e4a275 category: bugfix
- semihosting/config: Merge --semihosting-config  option groups mainline inclusion commit 90c072e063737e9e8f431489bbd334452f89056e category: bugfix
- semihosting: fix memleak at semihosting_arg_fallback
- target/i386: Export GDS_NO bit to guests</changelog>
  <changelog author="&lt;chunfu.jian@shingroup.cn&gt; - 10:6.2.0-85" date="1701432000">- spec: Add support for the ppc64le platform</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-86" date="1701777600">- vdpa: move memory listener to the realize stage
- vdpa: implement vdpa device migration
- vhost: implement post resume bh
- vhost: implement migration state notifier for vdpa device
- vhost: implement savevm_hanlder for vdpa device
- vhost: implement vhost_vdpa_device_suspend/resume
- vhost: implement vhost-vdpa suspend/resume
- vhost: add vhost_dev_suspend/resume_op
- vhost: introduce bytemap for vhost backend logging
- vhost-vdpa: add migration log ops for VhostOps
- vhost-vdpa: add VHOST_BACKEND_F_BYTEMAPLOG
- vhost: fix null pointer access
- ui/gtk: prevent ui lock up when dpy_gl_update called again before current draw event occurs
- hw/usb: dev-mtp: Use g_mkdir()
- target/ppc/cpu-models: Remove the "default" CPU alias
- hw/intc/arm_gicv3: ICC_PMR_EL1 high bits should be RAZ
- Fixed a QEMU hang when guest poweroff in COLO mode
- migration/colo: More accurate update checkpoint time
- scripts/entitlement.sh: Use backward-compatible cp flags
- block/nvme: fix infinite loop in nvme_free_req_queue_cb()
- hw/net: npcm7xx_emc fix missing queue_flush
- Add dummy Aspeed AST2600 Display Port MCU (DPMCU)
- hw/arm: ast2600: Fix address mapping of second SPI controller
- vhost-user-blk: reconnect on any error during realize
- vhost-user-blk: propagate error return from generic vhost
- hw/riscv: boot: Reduce FDT address alignment constraints
- Revert "hw/virtio/virtio-iommu-pci: Enforce the device is plugged on the root bus"
- Fix STM32F2XX USART data register readout
- block: use 'unsigned' for in_flight field on driver state
- sphinx: change default language to 'en'
- tests/qtest: Fix two format strings
- trivial typos: namesapce
- hw/ide/atapi.c: Correct typos (CD-CDROM -&gt; CD-ROM)
- hw/virtio/virtio-iommu-pci: Enforce the device is plugged on the root bus
- hw/display/next-fb: Fix comment typo
- xen/pass-through: merge emulated bits correctly mainline inclusion commit be9c61da9fc57eb7d293f380d0805ca6f46c2657 category: bugfix
- tests/qtest/migration-test.c: spelling fix: bandwith
- target/i386/cpu: Improve error message for property "vendor"
- balloon: Fix a misleading error message
- target/arm: Don't set syndrome ISS for loads and  stores with writeback mainline inclusion commit 53ae2fdef1f5661cbaa2ea571c517f98e6041cb8 category: bugfix
- disas/hppa: Show hexcode of instruction along with disassembly
- tcg/loongarch64: Fix tcg_out_mov() Aborted
- ui/qmp-cmds: Improve two error messages
- qga: Improve guest-exec-status error message
- hmp: Improve sync-profile error message
- spapr/pci: Correct "does not support hotplugging error messages
- xen/pass-through: don't create needless register  group mainline inclusion commit c0e86b7624cb9d6db03e0d48cf82659e5b89a6a6 category: bugfix</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-87" date="1703246400">- vdpa: suspend function return 0 when the vdpa device is stopped
- vdpa: don't suspend/resume device when vdpa device not started
- vdpa: support vdpa device suspend/resume
- vdpa: correct param passed in when unregister save
- vdpa: set vring enable only if the vring address has already been set
- shadow_dev: introduce shadow dev for virtio-net device
- revert "tcg/loongarch64: Fix tcg_out_mov() Aborted"
- migration: Set downtime_start even for postcopy
- gdb-xml: fix duplicate register in arm-neon.xml
- iotests: fix default machine type detection
- migration: fix RAMBlock add NULL check
- s390x: Fix spelling errors
- ppc: spelling fixes
- hw/scsi/vhost-scsi: don't double close vhostfd on error
- virtio/vhost-vsock: don't double close vhostfd, remove redundant cleanup
- hw/scsi/vhost-scsi: don't leak vqs on error
- hw/i386/pc: Add missing property descriptions
- pcie_aer: Don't trigger a LSI if none are defined
- pci: Export the pci_intx() function
- hw/qdev: Cosmetic around documentation
- tests/unit: fix a -Wformat-truncation warning
- tests/avocado: mark ReplayKernelNormal.test_mips64el_malta as flaky
- i386/sev: Avoid SEV-ES crash due to missing MSR_EFER_LMA bit
- ui/vnc-clipboard: fix inflate_buffer
- hw/usb/hcd-xhci.c: spelling: tranfer</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-88" date="1708516800">- ui/vnc.c: Fixed a deadlock bug.
- hw/i386: Fix comment style in topology.h
- migration/multifd: Remove unnecessary usage of local Error
- linux-user: fix sockaddr_in6 endianness
- vhost_vdpa: fix the input in trace_vhost_vdpa_listener_region_del()
- iotests: fix 194: filter out racy postcopy-active event
- tests/avocado: fix waiting for vm shutdown in replay_linux
- ui/vnc: fix debug output for invalid audio message</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-89" date="1709985600">- qga-win: Fix guest-get-fsinfo multi-disks collection
- hw/timer: fix systick trace message
- virtio-net: correctly copy vnet header when flushing TX (CVE-2023-6693)
- ui/clipboard: mark type as not available when there is no data (CVE-2023-6683)
- esp: restrict non-DMA transfer length to that of available data (CVE-2024-24474)
- hw/scsi/lsi53c895a: add missing decrement of reentrancy counter
- hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
- net: Update MemReentrancyGuard for NIC (CVE-2023-3019)
- net: Provide MemReentrancyGuard * to qemu_new_nic()</changelog>
</package>
<package pkgid="88b6e5a8d01c2575a2c5b468426af7593ca46d8266ebbc667390c18f7045b6ff" name="qemu" arch="src">
  <version epoch="10" ver="6.2.0" rel="90.oe2203sp1"/>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-81" date="1698667200">- hw/nvme: Avoid dynamic stack allocation
- ppc/vof: Fix missed fields in VOF cleanup
- ui: fix crash when there are no active_console
- tests/qtest/pflash: Clean up local variable shadowing
- target/ppc: Fix the order of kvm_enable judgment about kvmppc_set_interrupt()
- tulip: Assign default MAC address if not specified
- hw/char: fix qcode array bounds check in ESCC impl</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-82" date="1698667201">- thread-pool: optimize scheduling of completion bottom half
- migration/rdma: zore out head.repeat to make the error more clear
- vhost-user-fs: Back up vqs before cleaning up vhost_dev
- hw/vfio/pci-quirks: Sanitize capability pointer
- hw/vfio/pci-quirks: Support alternate offset for GPUDirect Cliques
- replay: fix event queue flush for qemu shutdown
- hw/net: Fix read of uninitialized memory in ftgmac100
- target/ppc: Fix tlbie
- target/i386: fix INVD vmexit
- qtest/npcm7xx_pwm-test: Fix memory leak in mft_qom_set
- aio-posix: zero out io_uring sqe user_data</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-83" date="1698667202">- hw/virtio/virtio-pmem: Replace impossible check by assertion
- tests: Fix printf format string in acpi-utils.c
- softmmu/dirtylimit: Add parameter check for hmp "set_vcpu_dirty_limit"
- disas/riscv: Fix the typo of inverted order of pmpaddr13 and pmpaddr14
- qga: Fix memory leak when output stream is unused
- ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
- target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
- target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
- target/i386: Allow MCDT_NO if host supports
- target/i386: Add support for MCDT_NO in CPUID enumeration
- target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
- target/i386: add support for FB_CLEAR feature
- target/i386: add support for FLUSH_L1D feature
- crypto: remove shadowed 'ret' variable
- hw/i2c/pmbus_device: Fix modifying QOM class internals from instance
- hw/arm/xlnx-zynqmp: fix unsigned error when checking the RPUs number</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-84" date="1701172800">- hw/arm/fsl-imx: Do not ignore Error argument
- hw/net/cadence_gem.c: spelling fixes: Octects
- tests/qtest: check the return value
- libvhost-user: Fix VHOST_USER_GET_MAX_MEM_SLOTS  reply mainline inclusion commit 69a5daec06f423843ce1bb9be5fb049314996f78 category: bugfix
- io_uring: fix short read slow path mainline inclusion commit c06fc7ce147e57ab493bad9263f1601b8298484b category: bugfix
- libvhost-user: Fix VHOST_USER_ADD_MEM_REG reply mainline inclusion commit 7f27d20ded2f480f3e66d03f90ea71507b834276 category: bugfix
- qsd: Unlink absolute PID file path mainline inclusion commit 9d8f8233b9fa525a7e37350fbc18877051128c5d category: bugfix
- net: Fix a misleading error message
- vdpa: stop all svq on device deletion
- vhost: release virtqueue objects in error path
- vhost: fix the fd leak
- virtio: i2c: Check notifier helpers for VIRTIO_CONFIG_IRQ_IDX
- hw/virtio: fix typo in VIRTIO_CONFIG_IRQ_IDX comments
- virtio-net: clear guest_announce feature if no cvq backend
- vdpa: fix VHOST_BACKEND_F_IOTLB_ASID flag check
- vdpa: do not block migration if device has cvq and x-svq=on
- vdpa net: block migration if the device has CVQ
- vdpa: Return -EIO if device ack is VIRTIO_NET_ERR in _load_mq()
- vdpa: Return -EIO if device ack is VIRTIO_NET_ERR in _load_mac()
- vdpa: fix not using CVQ buffer in case of error
- vdpa: Fix possible use-after-free for VirtQueueElement
- hw/virtio: fix vhost_user_read tracepoint
- vhost: Fix false positive out-of-bounds
- vhost: fix possible wrap in SVQ descriptor ring
- vhost: move iova_tree set to vhost_svq_start
- vhost: Always store new kick fd on vhost_svq_set_svq_kick_fd
- virtio-crypto: verify src&amp;dst buffer length for sym request
- vdpa: commit all host notifier MRs in a single MR transaction
- vdpa: harden the error path if get_iova_range failed
- vdpa-dev: get iova range explicitly
- virtio-pci: add support for configure interrupt
- virtio-mmio: add support for configure interrupt
- virtio-net: add support for configure interrupt
- vhost: add support for configure interrupt
- virtio: add support for configure interrupt
- vhost-vdpa: add support for config interrupt
- vhost: introduce new VhostOps vhost_set_config_call
- virtio-pci: decouple the single vector from the interrupt process
- virtio-pci: decouple notifier from interrupt process
- virtio: introduce macro VIRTIO_CONFIG_IRQ_IDX
- vdpa: do not handle VIRTIO_NET_F_GUEST_ANNOUNCE in vhost-vdpa
- vdpa: handle VIRTIO_NET_CTRL_ANNOUNCE in vhost_vdpa_net_handle_ctrl_avail
- vhost: fix vq dirty bitmap syncing when vIOMMU is enabled
- hw/virtio: gracefully handle unset vhost_dev vdev
- hw/virtio/vhost: Fix typo in comment.
- vdpa: always start CVQ in SVQ mode if possible
- vdpa: add shadow_data to vhost_vdpa
- vdpa: store x-svq parameter in VhostVDPAState
- vdpa: add asid parameter to vhost_vdpa_dma_map/unmap
- vdpa: allocate SVQ array unconditionally
- vdpa: move SVQ vring features check to net/
- vdpa: request iova_range only once
- vdpa: add vhost_vdpa_net_valid_svq_features
- vhost: allocate SVQ device file descriptors at device start
- vhost: set SVQ device call handler at SVQ start
- vdpa: use v-&gt;shadow_vqs_enabled in vhost_vdpa_svqs_start &amp; stop
- vhost: enable vrings in vhost_dev_start() for vhost-user devices
- vhost-vdpa: fix assert !virtio_net_get_subqueue(nc)-&gt;async_tx.elem in virtio_net_reset
- net/vhost-vdpa.c: Fix clang compilation failure
- vhost-vdpa: allow passing opened vhostfd to vhost-vdpa
- vdpa: Remove shadow CVQ command check
- vdpa: Delete duplicated vdpa_feature_bits entry
- hw/virtio: add some vhost-user trace events
- vdpa: Allow MQ feature in SVQ
- virtio-net: Update virtio-net curr_queue_pairs in vdpa backends
- vdpa: validate MQ CVQ commands
- vdpa: Add vhost_vdpa_net_load_mq
- vdpa: extract vhost_vdpa_net_load_mac from vhost_vdpa_net_load
- vdpa: Make VhostVDPAState cvq_cmd_in_buffer control ack type
- vdpa: Delete CVQ migration blocker
- vdpa: Add virtio-net mac address via CVQ at start
- vhost_net: add NetClientState-&gt;load() callback
- vdpa: extract vhost_vdpa_net_cvq_add from vhost_vdpa_net_handle_ctrl_avail
- vdpa: Move command buffers map to start of net device
- vdpa: add net_vhost_vdpa_cvq_info NetClientInfo
- vhost_net: Add NetClientInfo stop callback
- vhost_net: Add NetClientInfo start callback
- vdpa: Use ring hwaddr at vhost_vdpa_svq_unmap_ring
- vdpa: Make SVQ vring unmapping return void
- vdpa: Remove SVQ vring from iova_tree at shutdown
- util: accept iova_tree_remove_parameter by value
- vdpa: do not save failed dma maps in SVQ iova tree
- vdpa: Skip the maps not in the iova tree
- vdpa: Fix file descriptor leak on get features error
- vdpa: Fix memory listener deletions of iova tree
- vhost: Get vring base from vq, not svq
- vdpa: Add x-svq to NetdevVhostVDPAOptions
- vdpa: Add device migration blocker
- vdpa: Extract get features part from vhost_vdpa_get_max_queue_pairs
- vdpa: Buffer CVQ support on shadow virtqueue
- vdpa: manual forward CVQ buffers
- vdpa: Export vhost_vdpa_dma_map and unmap calls
- vhost: Add svq avail_handler callback
- vhost: add vhost_svq_poll
- vhost: Expose vhost_svq_add
- vhost: add vhost_svq_push_elem
- vhost: Track number of descs in SVQDescState
- vhost: Add SVQDescState
- vhost: Decouple vhost_svq_add from VirtQueueElement
- vhost: Check for queue full at vhost_svq_add
- vhost: Move vhost_svq_kick call to vhost_svq_add
- vhost: Reorder vhost_svq_kick
- vdpa: Avoid compiler to squash reads to used idx
- virtio-net: Expose ctrl virtqueue logic
- virtio-net: Expose MAC_TABLE_ENTRIES
- vhost: move descriptor translation to vhost_svq_vring_write_descs
- util: Return void on iova_tree_remove
- virtio-net: don't handle mq request in userspace handler for vhost-vdpa
- vhost-vdpa: change name and polarity for vhost_vdpa_one_time_request()
- vhost-vdpa: backend feature should set only once
- vhost-vdpa: fix improper cleanup in net_init_vhost_vdpa
- virtio-net: align ctrl_vq index for non-mq guest for vhost_vdpa
- virtio: add vhost support for virtio devices
- include/hw: start documenting the vhost API
- hw/virtio: add vhost_user_[read|write] trace points
- vhost: Fix element in vhost_svq_add failure
- vdpa: Fix index calculus at vhost_vdpa_svqs_start
- vdpa: Fix bad index calculus at vhost_vdpa_get_vring_base
- vhost: Fix device's used descriptor dequeue
- vhost: Track descriptor chain in private at SVQ
- vdpa: Add missing tracing to batch mapping functions
- vhost-vdpa: fix typo in a comment
- virtio: fix --enable-vhost-user build on non-Linux
- vdpa: Expose VHOST_F_LOG_ALL on SVQ
- vdpa: Never set log_base addr if SVQ is enabled
- vdpa: Adapt vhost_vdpa_get_vring_base to SVQ
- vdpa: Add custom IOTLB translations to SVQ
- vhost: Add VhostIOVATree
- util: add iova_tree_find_iova
- util: Add iova_tree_alloc_map
- vhost: Shadow virtqueue buffers forwarding
- vdpa: adapt vhost_ops callbacks to svq
- virtio: Add vhost_svq_get_vring_addr
- vhost: Add vhost_svq_valid_features to shadow vq
- vhost: Add Shadow VirtQueue call forwarding capabilities
- vhost: Add Shadow VirtQueue kick forwarding capabilities
- vhost: Add VhostShadowVirtqueue
- vdpa: Make ncs autofree
- Revert "virtio: introduce macro IRTIO_CONFIG_IRQ_IDX"
- Revert "virtio-pci: decouple notifier from interrupt process"
- Revert "virtio-pci: decouple the single vector from the interrupt process"
- Revert "vhost-vdpa: add support for config interrupt"
- Revert "virtio: add support for configure interrupt"
- Revert "vhost: add support for configure interrupt"
- Revert "virtio-net: add support for configure interrupt"
- Revert "virtio-mmio: add support for configure interrupt"
- Revert "virtio-pci: add support for configure interrupt"
- Revert "vhost: introduce new VhostOps vhost_set_config_call"
- virtio: signal after wrapping packed used_idx
- target/i386: Adjust feature level according to FEAT_7_1_EDX
- target/i386: Add new CPU model GraniteRapids
- target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
- target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
- target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
- target/i386: Add support for AVX-IFMA in CPUID enumeration
- target/i386: Add support for AMX-FP16 in CPUID enumeration
- target/i386: Add support for CMPCCXADD in CPUID enumeration
- tracetool: avoid invalid escape in Python string
- hw/pvrdma: Protect against buggy or malicious guest driver
- vga: avoid crash if no default vga card mainline inclusion commit 6985d8ede92494f3b791de01e8ee9306eb6d5e4a category: bugfix
- qom/object: Remove circular include dependency mainline inclusion commit 5bba9bcfbb42e7c016626420e148a1bf1b080835 category: bugfix
- artist: set memory region owners for buffers to the  artist device mainline inclusion commit 39fbaeca096a9bf6cbe2af88572c1cb2aa62aa8c category: bugfix
- virtio-iommu: Fix the partial copy of probe request mainline inclusion commit 45461aace83d961e933b27519b81d17b4c690514 category: bugfix
- e1000: set RX descriptor status in a separate  operation mainline inclusion commit 034d00d4858161e1d4cff82d8d230bce874a04d3 category: bugfix
- vhost: introduce new VhostOps vhost_set_config_call
- vhost: stick to -errno error return convention
- vhost-user: stick to -errno error return convention
- vhost-vdpa: stick to -errno error return convention
- virtio-pci: add support for configure interrupt
- virtio-mmio: add support for configure interrupt
- virtio-net: add support for configure interrupt
- vhost: add support for configure interrupt
- virtio: add support for configure interrupt
- vhost-vdpa: add support for config interrupt
- virtio-pci: decouple the single vector from the interrupt process
- virtio-pci: decouple notifier from interrupt process
- virtio: introduce macro IRTIO_CONFIG_IRQ_IDX
- pci: Fix the update of interrupt disable bit in PCI_COMMAND register
- hw/timer/npcm7xx_timer: Prevent timer from counting down past zero
- tpm_crb: mark command buffer as dirty on request  completion mainline inclusion commit e37a0ef4605e5d2041785ff3fc89ca6021faf7a0 category: bugfix
- pci: fix overflow in snprintf string formatting mainline inclusion commit 36f18c6989a3d1ff1d7a0e50b0868ef3958299b4 category: bugfix
- hw/usb/hcd-ehci: fix writeback order mainline inclusion commit f471e8b060798f26a7fc339c6152f82f22a7b33d category: bugfix
- qemu-timer: Skip empty timer lists before locking  in qemu_clock_deadline_ns_all mainline inclusion commit 3f42906c9ab2c777a895b48b87b8107167e4a275 category: bugfix
- semihosting/config: Merge --semihosting-config  option groups mainline inclusion commit 90c072e063737e9e8f431489bbd334452f89056e category: bugfix
- semihosting: fix memleak at semihosting_arg_fallback
- target/i386: Export GDS_NO bit to guests</changelog>
  <changelog author="&lt;chunfu.jian@shingroup.cn&gt; - 10:6.2.0-85" date="1701432000">- spec: Add support for the ppc64le platform</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-86" date="1701777600">- vdpa: move memory listener to the realize stage
- vdpa: implement vdpa device migration
- vhost: implement post resume bh
- vhost: implement migration state notifier for vdpa device
- vhost: implement savevm_hanlder for vdpa device
- vhost: implement vhost_vdpa_device_suspend/resume
- vhost: implement vhost-vdpa suspend/resume
- vhost: add vhost_dev_suspend/resume_op
- vhost: introduce bytemap for vhost backend logging
- vhost-vdpa: add migration log ops for VhostOps
- vhost-vdpa: add VHOST_BACKEND_F_BYTEMAPLOG
- vhost: fix null pointer access
- ui/gtk: prevent ui lock up when dpy_gl_update called again before current draw event occurs
- hw/usb: dev-mtp: Use g_mkdir()
- target/ppc/cpu-models: Remove the "default" CPU alias
- hw/intc/arm_gicv3: ICC_PMR_EL1 high bits should be RAZ
- Fixed a QEMU hang when guest poweroff in COLO mode
- migration/colo: More accurate update checkpoint time
- scripts/entitlement.sh: Use backward-compatible cp flags
- block/nvme: fix infinite loop in nvme_free_req_queue_cb()
- hw/net: npcm7xx_emc fix missing queue_flush
- Add dummy Aspeed AST2600 Display Port MCU (DPMCU)
- hw/arm: ast2600: Fix address mapping of second SPI controller
- vhost-user-blk: reconnect on any error during realize
- vhost-user-blk: propagate error return from generic vhost
- hw/riscv: boot: Reduce FDT address alignment constraints
- Revert "hw/virtio/virtio-iommu-pci: Enforce the device is plugged on the root bus"
- Fix STM32F2XX USART data register readout
- block: use 'unsigned' for in_flight field on driver state
- sphinx: change default language to 'en'
- tests/qtest: Fix two format strings
- trivial typos: namesapce
- hw/ide/atapi.c: Correct typos (CD-CDROM -&gt; CD-ROM)
- hw/virtio/virtio-iommu-pci: Enforce the device is plugged on the root bus
- hw/display/next-fb: Fix comment typo
- xen/pass-through: merge emulated bits correctly mainline inclusion commit be9c61da9fc57eb7d293f380d0805ca6f46c2657 category: bugfix
- tests/qtest/migration-test.c: spelling fix: bandwith
- target/i386/cpu: Improve error message for property "vendor"
- balloon: Fix a misleading error message
- target/arm: Don't set syndrome ISS for loads and  stores with writeback mainline inclusion commit 53ae2fdef1f5661cbaa2ea571c517f98e6041cb8 category: bugfix
- disas/hppa: Show hexcode of instruction along with disassembly
- tcg/loongarch64: Fix tcg_out_mov() Aborted
- ui/qmp-cmds: Improve two error messages
- qga: Improve guest-exec-status error message
- hmp: Improve sync-profile error message
- spapr/pci: Correct "does not support hotplugging error messages
- xen/pass-through: don't create needless register  group mainline inclusion commit c0e86b7624cb9d6db03e0d48cf82659e5b89a6a6 category: bugfix</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-87" date="1703246400">- vdpa: suspend function return 0 when the vdpa device is stopped
- vdpa: don't suspend/resume device when vdpa device not started
- vdpa: support vdpa device suspend/resume
- vdpa: correct param passed in when unregister save
- vdpa: set vring enable only if the vring address has already been set
- shadow_dev: introduce shadow dev for virtio-net device
- revert "tcg/loongarch64: Fix tcg_out_mov() Aborted"
- migration: Set downtime_start even for postcopy
- gdb-xml: fix duplicate register in arm-neon.xml
- iotests: fix default machine type detection
- migration: fix RAMBlock add NULL check
- s390x: Fix spelling errors
- ppc: spelling fixes
- hw/scsi/vhost-scsi: don't double close vhostfd on error
- virtio/vhost-vsock: don't double close vhostfd, remove redundant cleanup
- hw/scsi/vhost-scsi: don't leak vqs on error
- hw/i386/pc: Add missing property descriptions
- pcie_aer: Don't trigger a LSI if none are defined
- pci: Export the pci_intx() function
- hw/qdev: Cosmetic around documentation
- tests/unit: fix a -Wformat-truncation warning
- tests/avocado: mark ReplayKernelNormal.test_mips64el_malta as flaky
- i386/sev: Avoid SEV-ES crash due to missing MSR_EFER_LMA bit
- ui/vnc-clipboard: fix inflate_buffer
- hw/usb/hcd-xhci.c: spelling: tranfer</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-88" date="1708516800">- ui/vnc.c: Fixed a deadlock bug.
- hw/i386: Fix comment style in topology.h
- migration/multifd: Remove unnecessary usage of local Error
- linux-user: fix sockaddr_in6 endianness
- vhost_vdpa: fix the input in trace_vhost_vdpa_listener_region_del()
- iotests: fix 194: filter out racy postcopy-active event
- tests/avocado: fix waiting for vm shutdown in replay_linux
- ui/vnc: fix debug output for invalid audio message</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-89" date="1709985600">- qga-win: Fix guest-get-fsinfo multi-disks collection
- hw/timer: fix systick trace message
- virtio-net: correctly copy vnet header when flushing TX (CVE-2023-6693)
- ui/clipboard: mark type as not available when there is no data (CVE-2023-6683)
- esp: restrict non-DMA transfer length to that of available data (CVE-2024-24474)
- hw/scsi/lsi53c895a: add missing decrement of reentrancy counter
- hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
- net: Update MemReentrancyGuard for NIC (CVE-2023-3019)
- net: Provide MemReentrancyGuard * to qemu_new_nic()</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-90" date="1711195200">- i386/cpuid: Move leaf 7 to correct group
- i386/cpuid: Decrease cpuid_i when skipping CPUID leaf 1F
- i386/cpu: Mask with XCR0/XSS mask for FEAT_XSAVE_XCR0_HI and FEAT_XSAVE_XSS_HI leafs
- i386/cpu: Clear FEAT_XSAVE_XSS_LO/HI leafs when CPUID_EXT_XSAVE is not available
- target/i386: Change wrong XFRM value in SGX CPUID leaf
- target/i386: Enable support for XSAVES based features
- target/i386: Add kvm_get_one_msr helper
- hw/block/hd-geometry: Do not override specified bios-chs-trans mainline inclusion commit fd8a68ad6823d33bedeba20a22857867a1c3890e category: bugfix
- linux-user/riscv: Align signal frame to 16 bytes mainline inclusion commit 1eaa63429a9944265c92efdb94c02fabb231f564 category: bugfix
- ipmi:smbus: Add a check around a memcpy mainline inclusion commit 3fde641e7286f9b968bdb3b4b922c6465f2a9abc category: bugfix
- tests/tcg/linux-test: Fix random hangs in test_socket mainline inclusion commit b9e6074fc5b429b1e956e9c60db7e284a91e0f3d category: bugfix
- qemu-options.hx: Don't claim "-serial" has limit of 4 serial ports Before v2.12, the implementation of serial ports was limited to a value of MAX_SERIAL_PORTS = 4. We now dynamically allocate the data structures for serial ports, so this limit is no longer present, but the documentation for the -serial options still reads:
- target/ppc: Modify the uncorrect value irq to n_IRQ
- block-migration: Ensure we don't crash during migration cleanup
- target/s390x: fix handling of zeroes in vfmin/vfmax mainline inclusion commit 13c59eb09bd6d1fbc13f08b708226421f14a232b category: bugfix
- hw/virtio/virtio-iommu: Enforce power-of-two notify for both MAP and UNMAP mainline inclusion commit 0522be9a0c0094088ccef7aab352c57f483ca250 category: bugfix
- configure: Add missing POSIX-required space mainline inclusion commit 35a7a6fc5624b1df828d82f2dfa74d0e4188b3b2 category: bugfix
- vga: fix incorrect line height in 640x200x2 mode mainline inclusion commit 37e7b86766244b62a406747bb78e049390d0b528 category: bugfix
- hw/ide/core: set ERR_STAT in unsupported command completion
- linux-user/flatload.c: Fix setting of  image_info::end_code mainline inclusion commit 734a659ad264ac080457167e845ffabbaaa66d0e category: bugfix
- load_elf: fix iterator's type for elf file processing
- hw/misc/mps2-scc: Free MPS2SCC::oscclk[] array on finalize()
- hw/nvram/xlnx-efuse: Free XlnxEFuse::ro_bits[] array on finalize()
- hw/nvram/xlnx-efuse-ctrl: Free XlnxVersalEFuseCtrl[] "pg0-lock" array
- chardev/char.c: fix "abstract device type" error message
- block/rbd: fix handling of holes in .bdrv_co_block_status
- qga: treat get-guest-fsinfo as "best effort" mainline inclusion commit bbb0151cf2e82489120a15df5e2eb9653312b0ec category: bugfix
- usb/hcd-xhci: check slotid in  xhci_wakeup_endpoint() mainline inclusion commit 84218892f05515d20347fde4506e1944eb11cb25 category: bugfix
- hw/display/bcm2835_fb: Fix framebuffer allocation  address mainline inclusion commit 5865d99fe88d8c8fa437c18c6b63fb2a8165634f category: bugfix
- block/parallels: Fix buffer-based write call mainline inclusion commit eba088f91d21d9e42a81bef847173da30c5da961 category: bugfix
- vl: Improve error message for conflicting -incoming and -loadvm
- hw/smbios: Fix OEM strings table option validation</changelog>
</package>
<package pkgid="d2566b9807e83035fc8b155ccb3a2e3a79853cd7e5bc0419a59df94eeffd9cb6" name="qemu" arch="src">
  <version epoch="10" ver="6.2.0" rel="91.oe2203sp1"/>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-82" date="1698667200">- thread-pool: optimize scheduling of completion bottom half
- migration/rdma: zore out head.repeat to make the error more clear
- vhost-user-fs: Back up vqs before cleaning up vhost_dev
- hw/vfio/pci-quirks: Sanitize capability pointer
- hw/vfio/pci-quirks: Support alternate offset for GPUDirect Cliques
- replay: fix event queue flush for qemu shutdown
- hw/net: Fix read of uninitialized memory in ftgmac100
- target/ppc: Fix tlbie
- target/i386: fix INVD vmexit
- qtest/npcm7xx_pwm-test: Fix memory leak in mft_qom_set
- aio-posix: zero out io_uring sqe user_data</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-83" date="1698667201">- hw/virtio/virtio-pmem: Replace impossible check by assertion
- tests: Fix printf format string in acpi-utils.c
- softmmu/dirtylimit: Add parameter check for hmp "set_vcpu_dirty_limit"
- disas/riscv: Fix the typo of inverted order of pmpaddr13 and pmpaddr14
- qga: Fix memory leak when output stream is unused
- ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
- target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
- target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
- target/i386: Allow MCDT_NO if host supports
- target/i386: Add support for MCDT_NO in CPUID enumeration
- target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
- target/i386: add support for FB_CLEAR feature
- target/i386: add support for FLUSH_L1D feature
- crypto: remove shadowed 'ret' variable
- hw/i2c/pmbus_device: Fix modifying QOM class internals from instance
- hw/arm/xlnx-zynqmp: fix unsigned error when checking the RPUs number</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-84" date="1701172800">- hw/arm/fsl-imx: Do not ignore Error argument
- hw/net/cadence_gem.c: spelling fixes: Octects
- tests/qtest: check the return value
- libvhost-user: Fix VHOST_USER_GET_MAX_MEM_SLOTS  reply mainline inclusion commit 69a5daec06f423843ce1bb9be5fb049314996f78 category: bugfix
- io_uring: fix short read slow path mainline inclusion commit c06fc7ce147e57ab493bad9263f1601b8298484b category: bugfix
- libvhost-user: Fix VHOST_USER_ADD_MEM_REG reply mainline inclusion commit 7f27d20ded2f480f3e66d03f90ea71507b834276 category: bugfix
- qsd: Unlink absolute PID file path mainline inclusion commit 9d8f8233b9fa525a7e37350fbc18877051128c5d category: bugfix
- net: Fix a misleading error message
- vdpa: stop all svq on device deletion
- vhost: release virtqueue objects in error path
- vhost: fix the fd leak
- virtio: i2c: Check notifier helpers for VIRTIO_CONFIG_IRQ_IDX
- hw/virtio: fix typo in VIRTIO_CONFIG_IRQ_IDX comments
- virtio-net: clear guest_announce feature if no cvq backend
- vdpa: fix VHOST_BACKEND_F_IOTLB_ASID flag check
- vdpa: do not block migration if device has cvq and x-svq=on
- vdpa net: block migration if the device has CVQ
- vdpa: Return -EIO if device ack is VIRTIO_NET_ERR in _load_mq()
- vdpa: Return -EIO if device ack is VIRTIO_NET_ERR in _load_mac()
- vdpa: fix not using CVQ buffer in case of error
- vdpa: Fix possible use-after-free for VirtQueueElement
- hw/virtio: fix vhost_user_read tracepoint
- vhost: Fix false positive out-of-bounds
- vhost: fix possible wrap in SVQ descriptor ring
- vhost: move iova_tree set to vhost_svq_start
- vhost: Always store new kick fd on vhost_svq_set_svq_kick_fd
- virtio-crypto: verify src&amp;dst buffer length for sym request
- vdpa: commit all host notifier MRs in a single MR transaction
- vdpa: harden the error path if get_iova_range failed
- vdpa-dev: get iova range explicitly
- virtio-pci: add support for configure interrupt
- virtio-mmio: add support for configure interrupt
- virtio-net: add support for configure interrupt
- vhost: add support for configure interrupt
- virtio: add support for configure interrupt
- vhost-vdpa: add support for config interrupt
- vhost: introduce new VhostOps vhost_set_config_call
- virtio-pci: decouple the single vector from the interrupt process
- virtio-pci: decouple notifier from interrupt process
- virtio: introduce macro VIRTIO_CONFIG_IRQ_IDX
- vdpa: do not handle VIRTIO_NET_F_GUEST_ANNOUNCE in vhost-vdpa
- vdpa: handle VIRTIO_NET_CTRL_ANNOUNCE in vhost_vdpa_net_handle_ctrl_avail
- vhost: fix vq dirty bitmap syncing when vIOMMU is enabled
- hw/virtio: gracefully handle unset vhost_dev vdev
- hw/virtio/vhost: Fix typo in comment.
- vdpa: always start CVQ in SVQ mode if possible
- vdpa: add shadow_data to vhost_vdpa
- vdpa: store x-svq parameter in VhostVDPAState
- vdpa: add asid parameter to vhost_vdpa_dma_map/unmap
- vdpa: allocate SVQ array unconditionally
- vdpa: move SVQ vring features check to net/
- vdpa: request iova_range only once
- vdpa: add vhost_vdpa_net_valid_svq_features
- vhost: allocate SVQ device file descriptors at device start
- vhost: set SVQ device call handler at SVQ start
- vdpa: use v-&gt;shadow_vqs_enabled in vhost_vdpa_svqs_start &amp; stop
- vhost: enable vrings in vhost_dev_start() for vhost-user devices
- vhost-vdpa: fix assert !virtio_net_get_subqueue(nc)-&gt;async_tx.elem in virtio_net_reset
- net/vhost-vdpa.c: Fix clang compilation failure
- vhost-vdpa: allow passing opened vhostfd to vhost-vdpa
- vdpa: Remove shadow CVQ command check
- vdpa: Delete duplicated vdpa_feature_bits entry
- hw/virtio: add some vhost-user trace events
- vdpa: Allow MQ feature in SVQ
- virtio-net: Update virtio-net curr_queue_pairs in vdpa backends
- vdpa: validate MQ CVQ commands
- vdpa: Add vhost_vdpa_net_load_mq
- vdpa: extract vhost_vdpa_net_load_mac from vhost_vdpa_net_load
- vdpa: Make VhostVDPAState cvq_cmd_in_buffer control ack type
- vdpa: Delete CVQ migration blocker
- vdpa: Add virtio-net mac address via CVQ at start
- vhost_net: add NetClientState-&gt;load() callback
- vdpa: extract vhost_vdpa_net_cvq_add from vhost_vdpa_net_handle_ctrl_avail
- vdpa: Move command buffers map to start of net device
- vdpa: add net_vhost_vdpa_cvq_info NetClientInfo
- vhost_net: Add NetClientInfo stop callback
- vhost_net: Add NetClientInfo start callback
- vdpa: Use ring hwaddr at vhost_vdpa_svq_unmap_ring
- vdpa: Make SVQ vring unmapping return void
- vdpa: Remove SVQ vring from iova_tree at shutdown
- util: accept iova_tree_remove_parameter by value
- vdpa: do not save failed dma maps in SVQ iova tree
- vdpa: Skip the maps not in the iova tree
- vdpa: Fix file descriptor leak on get features error
- vdpa: Fix memory listener deletions of iova tree
- vhost: Get vring base from vq, not svq
- vdpa: Add x-svq to NetdevVhostVDPAOptions
- vdpa: Add device migration blocker
- vdpa: Extract get features part from vhost_vdpa_get_max_queue_pairs
- vdpa: Buffer CVQ support on shadow virtqueue
- vdpa: manual forward CVQ buffers
- vdpa: Export vhost_vdpa_dma_map and unmap calls
- vhost: Add svq avail_handler callback
- vhost: add vhost_svq_poll
- vhost: Expose vhost_svq_add
- vhost: add vhost_svq_push_elem
- vhost: Track number of descs in SVQDescState
- vhost: Add SVQDescState
- vhost: Decouple vhost_svq_add from VirtQueueElement
- vhost: Check for queue full at vhost_svq_add
- vhost: Move vhost_svq_kick call to vhost_svq_add
- vhost: Reorder vhost_svq_kick
- vdpa: Avoid compiler to squash reads to used idx
- virtio-net: Expose ctrl virtqueue logic
- virtio-net: Expose MAC_TABLE_ENTRIES
- vhost: move descriptor translation to vhost_svq_vring_write_descs
- util: Return void on iova_tree_remove
- virtio-net: don't handle mq request in userspace handler for vhost-vdpa
- vhost-vdpa: change name and polarity for vhost_vdpa_one_time_request()
- vhost-vdpa: backend feature should set only once
- vhost-vdpa: fix improper cleanup in net_init_vhost_vdpa
- virtio-net: align ctrl_vq index for non-mq guest for vhost_vdpa
- virtio: add vhost support for virtio devices
- include/hw: start documenting the vhost API
- hw/virtio: add vhost_user_[read|write] trace points
- vhost: Fix element in vhost_svq_add failure
- vdpa: Fix index calculus at vhost_vdpa_svqs_start
- vdpa: Fix bad index calculus at vhost_vdpa_get_vring_base
- vhost: Fix device's used descriptor dequeue
- vhost: Track descriptor chain in private at SVQ
- vdpa: Add missing tracing to batch mapping functions
- vhost-vdpa: fix typo in a comment
- virtio: fix --enable-vhost-user build on non-Linux
- vdpa: Expose VHOST_F_LOG_ALL on SVQ
- vdpa: Never set log_base addr if SVQ is enabled
- vdpa: Adapt vhost_vdpa_get_vring_base to SVQ
- vdpa: Add custom IOTLB translations to SVQ
- vhost: Add VhostIOVATree
- util: add iova_tree_find_iova
- util: Add iova_tree_alloc_map
- vhost: Shadow virtqueue buffers forwarding
- vdpa: adapt vhost_ops callbacks to svq
- virtio: Add vhost_svq_get_vring_addr
- vhost: Add vhost_svq_valid_features to shadow vq
- vhost: Add Shadow VirtQueue call forwarding capabilities
- vhost: Add Shadow VirtQueue kick forwarding capabilities
- vhost: Add VhostShadowVirtqueue
- vdpa: Make ncs autofree
- Revert "virtio: introduce macro IRTIO_CONFIG_IRQ_IDX"
- Revert "virtio-pci: decouple notifier from interrupt process"
- Revert "virtio-pci: decouple the single vector from the interrupt process"
- Revert "vhost-vdpa: add support for config interrupt"
- Revert "virtio: add support for configure interrupt"
- Revert "vhost: add support for configure interrupt"
- Revert "virtio-net: add support for configure interrupt"
- Revert "virtio-mmio: add support for configure interrupt"
- Revert "virtio-pci: add support for configure interrupt"
- Revert "vhost: introduce new VhostOps vhost_set_config_call"
- virtio: signal after wrapping packed used_idx
- target/i386: Adjust feature level according to FEAT_7_1_EDX
- target/i386: Add new CPU model GraniteRapids
- target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
- target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
- target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
- target/i386: Add support for AVX-IFMA in CPUID enumeration
- target/i386: Add support for AMX-FP16 in CPUID enumeration
- target/i386: Add support for CMPCCXADD in CPUID enumeration
- tracetool: avoid invalid escape in Python string
- hw/pvrdma: Protect against buggy or malicious guest driver
- vga: avoid crash if no default vga card mainline inclusion commit 6985d8ede92494f3b791de01e8ee9306eb6d5e4a category: bugfix
- qom/object: Remove circular include dependency mainline inclusion commit 5bba9bcfbb42e7c016626420e148a1bf1b080835 category: bugfix
- artist: set memory region owners for buffers to the  artist device mainline inclusion commit 39fbaeca096a9bf6cbe2af88572c1cb2aa62aa8c category: bugfix
- virtio-iommu: Fix the partial copy of probe request mainline inclusion commit 45461aace83d961e933b27519b81d17b4c690514 category: bugfix
- e1000: set RX descriptor status in a separate  operation mainline inclusion commit 034d00d4858161e1d4cff82d8d230bce874a04d3 category: bugfix
- vhost: introduce new VhostOps vhost_set_config_call
- vhost: stick to -errno error return convention
- vhost-user: stick to -errno error return convention
- vhost-vdpa: stick to -errno error return convention
- virtio-pci: add support for configure interrupt
- virtio-mmio: add support for configure interrupt
- virtio-net: add support for configure interrupt
- vhost: add support for configure interrupt
- virtio: add support for configure interrupt
- vhost-vdpa: add support for config interrupt
- virtio-pci: decouple the single vector from the interrupt process
- virtio-pci: decouple notifier from interrupt process
- virtio: introduce macro IRTIO_CONFIG_IRQ_IDX
- pci: Fix the update of interrupt disable bit in PCI_COMMAND register
- hw/timer/npcm7xx_timer: Prevent timer from counting down past zero
- tpm_crb: mark command buffer as dirty on request  completion mainline inclusion commit e37a0ef4605e5d2041785ff3fc89ca6021faf7a0 category: bugfix
- pci: fix overflow in snprintf string formatting mainline inclusion commit 36f18c6989a3d1ff1d7a0e50b0868ef3958299b4 category: bugfix
- hw/usb/hcd-ehci: fix writeback order mainline inclusion commit f471e8b060798f26a7fc339c6152f82f22a7b33d category: bugfix
- qemu-timer: Skip empty timer lists before locking  in qemu_clock_deadline_ns_all mainline inclusion commit 3f42906c9ab2c777a895b48b87b8107167e4a275 category: bugfix
- semihosting/config: Merge --semihosting-config  option groups mainline inclusion commit 90c072e063737e9e8f431489bbd334452f89056e category: bugfix
- semihosting: fix memleak at semihosting_arg_fallback
- target/i386: Export GDS_NO bit to guests</changelog>
  <changelog author="&lt;chunfu.jian@shingroup.cn&gt; - 10:6.2.0-85" date="1701432000">- spec: Add support for the ppc64le platform</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-86" date="1701777600">- vdpa: move memory listener to the realize stage
- vdpa: implement vdpa device migration
- vhost: implement post resume bh
- vhost: implement migration state notifier for vdpa device
- vhost: implement savevm_hanlder for vdpa device
- vhost: implement vhost_vdpa_device_suspend/resume
- vhost: implement vhost-vdpa suspend/resume
- vhost: add vhost_dev_suspend/resume_op
- vhost: introduce bytemap for vhost backend logging
- vhost-vdpa: add migration log ops for VhostOps
- vhost-vdpa: add VHOST_BACKEND_F_BYTEMAPLOG
- vhost: fix null pointer access
- ui/gtk: prevent ui lock up when dpy_gl_update called again before current draw event occurs
- hw/usb: dev-mtp: Use g_mkdir()
- target/ppc/cpu-models: Remove the "default" CPU alias
- hw/intc/arm_gicv3: ICC_PMR_EL1 high bits should be RAZ
- Fixed a QEMU hang when guest poweroff in COLO mode
- migration/colo: More accurate update checkpoint time
- scripts/entitlement.sh: Use backward-compatible cp flags
- block/nvme: fix infinite loop in nvme_free_req_queue_cb()
- hw/net: npcm7xx_emc fix missing queue_flush
- Add dummy Aspeed AST2600 Display Port MCU (DPMCU)
- hw/arm: ast2600: Fix address mapping of second SPI controller
- vhost-user-blk: reconnect on any error during realize
- vhost-user-blk: propagate error return from generic vhost
- hw/riscv: boot: Reduce FDT address alignment constraints
- Revert "hw/virtio/virtio-iommu-pci: Enforce the device is plugged on the root bus"
- Fix STM32F2XX USART data register readout
- block: use 'unsigned' for in_flight field on driver state
- sphinx: change default language to 'en'
- tests/qtest: Fix two format strings
- trivial typos: namesapce
- hw/ide/atapi.c: Correct typos (CD-CDROM -&gt; CD-ROM)
- hw/virtio/virtio-iommu-pci: Enforce the device is plugged on the root bus
- hw/display/next-fb: Fix comment typo
- xen/pass-through: merge emulated bits correctly mainline inclusion commit be9c61da9fc57eb7d293f380d0805ca6f46c2657 category: bugfix
- tests/qtest/migration-test.c: spelling fix: bandwith
- target/i386/cpu: Improve error message for property "vendor"
- balloon: Fix a misleading error message
- target/arm: Don't set syndrome ISS for loads and  stores with writeback mainline inclusion commit 53ae2fdef1f5661cbaa2ea571c517f98e6041cb8 category: bugfix
- disas/hppa: Show hexcode of instruction along with disassembly
- tcg/loongarch64: Fix tcg_out_mov() Aborted
- ui/qmp-cmds: Improve two error messages
- qga: Improve guest-exec-status error message
- hmp: Improve sync-profile error message
- spapr/pci: Correct "does not support hotplugging error messages
- xen/pass-through: don't create needless register  group mainline inclusion commit c0e86b7624cb9d6db03e0d48cf82659e5b89a6a6 category: bugfix</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-87" date="1703246400">- vdpa: suspend function return 0 when the vdpa device is stopped
- vdpa: don't suspend/resume device when vdpa device not started
- vdpa: support vdpa device suspend/resume
- vdpa: correct param passed in when unregister save
- vdpa: set vring enable only if the vring address has already been set
- shadow_dev: introduce shadow dev for virtio-net device
- revert "tcg/loongarch64: Fix tcg_out_mov() Aborted"
- migration: Set downtime_start even for postcopy
- gdb-xml: fix duplicate register in arm-neon.xml
- iotests: fix default machine type detection
- migration: fix RAMBlock add NULL check
- s390x: Fix spelling errors
- ppc: spelling fixes
- hw/scsi/vhost-scsi: don't double close vhostfd on error
- virtio/vhost-vsock: don't double close vhostfd, remove redundant cleanup
- hw/scsi/vhost-scsi: don't leak vqs on error
- hw/i386/pc: Add missing property descriptions
- pcie_aer: Don't trigger a LSI if none are defined
- pci: Export the pci_intx() function
- hw/qdev: Cosmetic around documentation
- tests/unit: fix a -Wformat-truncation warning
- tests/avocado: mark ReplayKernelNormal.test_mips64el_malta as flaky
- i386/sev: Avoid SEV-ES crash due to missing MSR_EFER_LMA bit
- ui/vnc-clipboard: fix inflate_buffer
- hw/usb/hcd-xhci.c: spelling: tranfer</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-88" date="1708516800">- ui/vnc.c: Fixed a deadlock bug.
- hw/i386: Fix comment style in topology.h
- migration/multifd: Remove unnecessary usage of local Error
- linux-user: fix sockaddr_in6 endianness
- vhost_vdpa: fix the input in trace_vhost_vdpa_listener_region_del()
- iotests: fix 194: filter out racy postcopy-active event
- tests/avocado: fix waiting for vm shutdown in replay_linux
- ui/vnc: fix debug output for invalid audio message</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-89" date="1709985600">- qga-win: Fix guest-get-fsinfo multi-disks collection
- hw/timer: fix systick trace message
- virtio-net: correctly copy vnet header when flushing TX (CVE-2023-6693)
- ui/clipboard: mark type as not available when there is no data (CVE-2023-6683)
- esp: restrict non-DMA transfer length to that of available data (CVE-2024-24474)
- hw/scsi/lsi53c895a: add missing decrement of reentrancy counter
- hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
- net: Update MemReentrancyGuard for NIC (CVE-2023-3019)
- net: Provide MemReentrancyGuard * to qemu_new_nic()</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-90" date="1711195200">- i386/cpuid: Move leaf 7 to correct group
- i386/cpuid: Decrease cpuid_i when skipping CPUID leaf 1F
- i386/cpu: Mask with XCR0/XSS mask for FEAT_XSAVE_XCR0_HI and FEAT_XSAVE_XSS_HI leafs
- i386/cpu: Clear FEAT_XSAVE_XSS_LO/HI leafs when CPUID_EXT_XSAVE is not available
- target/i386: Change wrong XFRM value in SGX CPUID leaf
- target/i386: Enable support for XSAVES based features
- target/i386: Add kvm_get_one_msr helper
- hw/block/hd-geometry: Do not override specified bios-chs-trans mainline inclusion commit fd8a68ad6823d33bedeba20a22857867a1c3890e category: bugfix
- linux-user/riscv: Align signal frame to 16 bytes mainline inclusion commit 1eaa63429a9944265c92efdb94c02fabb231f564 category: bugfix
- ipmi:smbus: Add a check around a memcpy mainline inclusion commit 3fde641e7286f9b968bdb3b4b922c6465f2a9abc category: bugfix
- tests/tcg/linux-test: Fix random hangs in test_socket mainline inclusion commit b9e6074fc5b429b1e956e9c60db7e284a91e0f3d category: bugfix
- qemu-options.hx: Don't claim "-serial" has limit of 4 serial ports Before v2.12, the implementation of serial ports was limited to a value of MAX_SERIAL_PORTS = 4. We now dynamically allocate the data structures for serial ports, so this limit is no longer present, but the documentation for the -serial options still reads:
- target/ppc: Modify the uncorrect value irq to n_IRQ
- block-migration: Ensure we don't crash during migration cleanup
- target/s390x: fix handling of zeroes in vfmin/vfmax mainline inclusion commit 13c59eb09bd6d1fbc13f08b708226421f14a232b category: bugfix
- hw/virtio/virtio-iommu: Enforce power-of-two notify for both MAP and UNMAP mainline inclusion commit 0522be9a0c0094088ccef7aab352c57f483ca250 category: bugfix
- configure: Add missing POSIX-required space mainline inclusion commit 35a7a6fc5624b1df828d82f2dfa74d0e4188b3b2 category: bugfix
- vga: fix incorrect line height in 640x200x2 mode mainline inclusion commit 37e7b86766244b62a406747bb78e049390d0b528 category: bugfix
- hw/ide/core: set ERR_STAT in unsupported command completion
- linux-user/flatload.c: Fix setting of  image_info::end_code mainline inclusion commit 734a659ad264ac080457167e845ffabbaaa66d0e category: bugfix
- load_elf: fix iterator's type for elf file processing
- hw/misc/mps2-scc: Free MPS2SCC::oscclk[] array on finalize()
- hw/nvram/xlnx-efuse: Free XlnxEFuse::ro_bits[] array on finalize()
- hw/nvram/xlnx-efuse-ctrl: Free XlnxVersalEFuseCtrl[] "pg0-lock" array
- chardev/char.c: fix "abstract device type" error message
- block/rbd: fix handling of holes in .bdrv_co_block_status
- qga: treat get-guest-fsinfo as "best effort" mainline inclusion commit bbb0151cf2e82489120a15df5e2eb9653312b0ec category: bugfix
- usb/hcd-xhci: check slotid in  xhci_wakeup_endpoint() mainline inclusion commit 84218892f05515d20347fde4506e1944eb11cb25 category: bugfix
- hw/display/bcm2835_fb: Fix framebuffer allocation  address mainline inclusion commit 5865d99fe88d8c8fa437c18c6b63fb2a8165634f category: bugfix
- block/parallels: Fix buffer-based write call mainline inclusion commit eba088f91d21d9e42a81bef847173da30c5da961 category: bugfix
- vl: Improve error message for conflicting -incoming and -loadvm
- hw/smbios: Fix OEM strings table option validation</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-91" date="1713787200">- hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs(CVE-2024-3446)
- hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs(CVE-2024-3446)
- hw/display/virtio-gpu: Protect from DMA re-entrancy bugs(CVE-2024-3446)
- hw/virtio: Introduce virtio_bh_new_guarded() helper
- hw: replace most qemu_bh_new calls with qemu_bh_new_guarded
- checkpatch: add qemu_bh_new/aio_bh_new checks
- async: avoid use-after-free on re-entrancy guard
- async: Add an optional reentrancy guard to the BH API
- hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set(CVE-2024-3447)
- rtl8139: Remove unused variable
- tulip: Remove unused variable
- virtio-mem: Fix the bitmap index of the section offset
- virtio-mem: Fix the iterator variable in a vmem-&gt;rdl_list loop
- system/memory: use ldn_he_p/stn_he_p
- block: Fix crash when loading snapshot on inactive node
- smmu: Clear SMMUPciBus pointer cache when system reset
- block/mirror: Fix NULL s-&gt;job in active writes
- amd_iommu: Fix APIC address check
- virtio-crypto: fix NULL pointer dereference in virtio_crypto_free_reques
- libqos/virtio.c: Correct 'flags' reading in qvirtqueue_kick
- ivshmem-test.c: enable test_ivshmem_server for ppc64 arch
- ivshmem.c: change endianness to LITTLE_ENDIAN
- hw/ppc/mac.h: Remove MAX_CPUS macro
- configure: remove dead variables
- virtio-gpu: do not byteswap padding
- hw/intc: clean-up error reporting for failed ITS cmd
- qemu-iotests: Discard stderr when probing devices
- linux-user: un-parent OBJECT(cpu) when closing thread
- hw/net/rocker: Avoid undefined shifts with more than 31 ports
- contrib/vhost-user-blk: Clean up deallocation of VuVirtqElement
- scsi-disk: fix overflow when block size is not a multiple of BDRV_SECTOR_SIZE</changelog>
</package>
<package pkgid="413b75ba6e254f3c9478299ff835f6d6c7f45a427fb923b4a39fbc28300aaa83" name="qemu" arch="src">
  <version epoch="10" ver="6.2.0" rel="96.oe2203sp1"/>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-87" date="1703246400">- vdpa: suspend function return 0 when the vdpa device is stopped
- vdpa: don't suspend/resume device when vdpa device not started
- vdpa: support vdpa device suspend/resume
- vdpa: correct param passed in when unregister save
- vdpa: set vring enable only if the vring address has already been set
- shadow_dev: introduce shadow dev for virtio-net device
- revert "tcg/loongarch64: Fix tcg_out_mov() Aborted"
- migration: Set downtime_start even for postcopy
- gdb-xml: fix duplicate register in arm-neon.xml
- iotests: fix default machine type detection
- migration: fix RAMBlock add NULL check
- s390x: Fix spelling errors
- ppc: spelling fixes
- hw/scsi/vhost-scsi: don't double close vhostfd on error
- virtio/vhost-vsock: don't double close vhostfd, remove redundant cleanup
- hw/scsi/vhost-scsi: don't leak vqs on error
- hw/i386/pc: Add missing property descriptions
- pcie_aer: Don't trigger a LSI if none are defined
- pci: Export the pci_intx() function
- hw/qdev: Cosmetic around documentation
- tests/unit: fix a -Wformat-truncation warning
- tests/avocado: mark ReplayKernelNormal.test_mips64el_malta as flaky
- i386/sev: Avoid SEV-ES crash due to missing MSR_EFER_LMA bit
- ui/vnc-clipboard: fix inflate_buffer
- hw/usb/hcd-xhci.c: spelling: tranfer</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-88" date="1708516800">- ui/vnc.c: Fixed a deadlock bug.
- hw/i386: Fix comment style in topology.h
- migration/multifd: Remove unnecessary usage of local Error
- linux-user: fix sockaddr_in6 endianness
- vhost_vdpa: fix the input in trace_vhost_vdpa_listener_region_del()
- iotests: fix 194: filter out racy postcopy-active event
- tests/avocado: fix waiting for vm shutdown in replay_linux
- ui/vnc: fix debug output for invalid audio message</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-89" date="1709985600">- qga-win: Fix guest-get-fsinfo multi-disks collection
- hw/timer: fix systick trace message
- virtio-net: correctly copy vnet header when flushing TX (CVE-2023-6693)
- ui/clipboard: mark type as not available when there is no data (CVE-2023-6683)
- esp: restrict non-DMA transfer length to that of available data (CVE-2024-24474)
- hw/scsi/lsi53c895a: add missing decrement of reentrancy counter
- hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
- net: Update MemReentrancyGuard for NIC (CVE-2023-3019)
- net: Provide MemReentrancyGuard * to qemu_new_nic()</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-90" date="1711195200">- i386/cpuid: Move leaf 7 to correct group
- i386/cpuid: Decrease cpuid_i when skipping CPUID leaf 1F
- i386/cpu: Mask with XCR0/XSS mask for FEAT_XSAVE_XCR0_HI and FEAT_XSAVE_XSS_HI leafs
- i386/cpu: Clear FEAT_XSAVE_XSS_LO/HI leafs when CPUID_EXT_XSAVE is not available
- target/i386: Change wrong XFRM value in SGX CPUID leaf
- target/i386: Enable support for XSAVES based features
- target/i386: Add kvm_get_one_msr helper
- hw/block/hd-geometry: Do not override specified bios-chs-trans mainline inclusion commit fd8a68ad6823d33bedeba20a22857867a1c3890e category: bugfix
- linux-user/riscv: Align signal frame to 16 bytes mainline inclusion commit 1eaa63429a9944265c92efdb94c02fabb231f564 category: bugfix
- ipmi:smbus: Add a check around a memcpy mainline inclusion commit 3fde641e7286f9b968bdb3b4b922c6465f2a9abc category: bugfix
- tests/tcg/linux-test: Fix random hangs in test_socket mainline inclusion commit b9e6074fc5b429b1e956e9c60db7e284a91e0f3d category: bugfix
- qemu-options.hx: Don't claim "-serial" has limit of 4 serial ports Before v2.12, the implementation of serial ports was limited to a value of MAX_SERIAL_PORTS = 4. We now dynamically allocate the data structures for serial ports, so this limit is no longer present, but the documentation for the -serial options still reads:
- target/ppc: Modify the uncorrect value irq to n_IRQ
- block-migration: Ensure we don't crash during migration cleanup
- target/s390x: fix handling of zeroes in vfmin/vfmax mainline inclusion commit 13c59eb09bd6d1fbc13f08b708226421f14a232b category: bugfix
- hw/virtio/virtio-iommu: Enforce power-of-two notify for both MAP and UNMAP mainline inclusion commit 0522be9a0c0094088ccef7aab352c57f483ca250 category: bugfix
- configure: Add missing POSIX-required space mainline inclusion commit 35a7a6fc5624b1df828d82f2dfa74d0e4188b3b2 category: bugfix
- vga: fix incorrect line height in 640x200x2 mode mainline inclusion commit 37e7b86766244b62a406747bb78e049390d0b528 category: bugfix
- hw/ide/core: set ERR_STAT in unsupported command completion
- linux-user/flatload.c: Fix setting of  image_info::end_code mainline inclusion commit 734a659ad264ac080457167e845ffabbaaa66d0e category: bugfix
- load_elf: fix iterator's type for elf file processing
- hw/misc/mps2-scc: Free MPS2SCC::oscclk[] array on finalize()
- hw/nvram/xlnx-efuse: Free XlnxEFuse::ro_bits[] array on finalize()
- hw/nvram/xlnx-efuse-ctrl: Free XlnxVersalEFuseCtrl[] "pg0-lock" array
- chardev/char.c: fix "abstract device type" error message
- block/rbd: fix handling of holes in .bdrv_co_block_status
- qga: treat get-guest-fsinfo as "best effort" mainline inclusion commit bbb0151cf2e82489120a15df5e2eb9653312b0ec category: bugfix
- usb/hcd-xhci: check slotid in  xhci_wakeup_endpoint() mainline inclusion commit 84218892f05515d20347fde4506e1944eb11cb25 category: bugfix
- hw/display/bcm2835_fb: Fix framebuffer allocation  address mainline inclusion commit 5865d99fe88d8c8fa437c18c6b63fb2a8165634f category: bugfix
- block/parallels: Fix buffer-based write call mainline inclusion commit eba088f91d21d9e42a81bef847173da30c5da961 category: bugfix
- vl: Improve error message for conflicting -incoming and -loadvm
- hw/smbios: Fix OEM strings table option validation</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-91" date="1713787200">- hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs(CVE-2024-3446)
- hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs(CVE-2024-3446)
- hw/display/virtio-gpu: Protect from DMA re-entrancy bugs(CVE-2024-3446)
- hw/virtio: Introduce virtio_bh_new_guarded() helper
- hw: replace most qemu_bh_new calls with qemu_bh_new_guarded
- checkpatch: add qemu_bh_new/aio_bh_new checks
- async: avoid use-after-free on re-entrancy guard
- async: Add an optional reentrancy guard to the BH API
- hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set(CVE-2024-3447)
- rtl8139: Remove unused variable
- tulip: Remove unused variable
- virtio-mem: Fix the bitmap index of the section offset
- virtio-mem: Fix the iterator variable in a vmem-&gt;rdl_list loop
- system/memory: use ldn_he_p/stn_he_p
- block: Fix crash when loading snapshot on inactive node
- smmu: Clear SMMUPciBus pointer cache when system reset
- block/mirror: Fix NULL s-&gt;job in active writes
- amd_iommu: Fix APIC address check
- virtio-crypto: fix NULL pointer dereference in virtio_crypto_free_reques
- libqos/virtio.c: Correct 'flags' reading in qvirtqueue_kick
- ivshmem-test.c: enable test_ivshmem_server for ppc64 arch
- ivshmem.c: change endianness to LITTLE_ENDIAN
- hw/ppc/mac.h: Remove MAX_CPUS macro
- configure: remove dead variables
- virtio-gpu: do not byteswap padding
- hw/intc: clean-up error reporting for failed ITS cmd
- qemu-iotests: Discard stderr when probing devices
- linux-user: un-parent OBJECT(cpu) when closing thread
- hw/net/rocker: Avoid undefined shifts with more than 31 ports
- contrib/vhost-user-blk: Clean up deallocation of VuVirtqElement
- scsi-disk: fix overflow when block size is not a multiple of BDRV_SECTOR_SIZE</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-92" date="1718280000">- s390x/sclp: Simplify get_sclp_device() 
- target/ppc: Remove msr_pr macro
- docs/system/target-arm: Re-alphabetize board list
- migration: Extend query-migrate to provide dirty page limit info
- migration: Implement dirty-limit convergence algo
- migration: Put the detection logic before auto-converge checking
- migration: Refactor auto-converge capability logic
- migration: Introduce dirty-limit capability
- qapi/migration: Introduce vcpu-dirty-limit parameters
- qapi/migration: Introduce x-vcpu-dirty-limit-period parameter
- Change the value of no_ged from true to false
- Allow UNIX socket option for VNC websocket
- tpm_emulator: Avoid double initialization during
- chardev/char-socket: Update AF_UNIX for Windows
- KVM: dirty ring: add missing memory barrier
- i386: reset KVM nested state upon CPU reset
- esp: Handle CMD_BUSRESET by resetting the SCSI bus
- dbus-vmstate: Restrict error checks to registered proxies in dbus_get_proxies
- vfio/pci: Add Ascend310b scend910b support
- target/i386: Export RFDS bit to guests
- target/i386: Add new CPU model SierraForest
- target/i386: Introduce Icelake-Server-v7 to enable TSX
- hw/virtio: handle un-configured shutdown in virtio-pci
- target/s390x: display deprecation status in '-cpu  help'
- target/i386: display deprecation status in '-cpu  help'
- pc-bios/s390-ccw: Fix booting with logical block size &lt; physical block size</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-93" date="1718452800">- cvm: bug-fix for macro isolation
- tests/qtest: ahci-test: add test exposing reset issue with pending callback (Fix CVE-2023-5088)
- hw/ide: reset: cancel async DMA operation before resetting state (Fix CVE-2023-5088)
- Add support for the virtcca cvm feature.</changelog>
  <changelog author="&lt;liupingwei@huawei.com&gt; - 10:6.2.0-94" date="1718712000">- hw/arm/virt: Disable DTB randomness for confidential VMs</changelog>
  <changelog author="&lt;liupingwei@huawei.com&gt; - 10:6.2.0-95" date="1718971200">- cvm: bug-fix for disable DTB randomness for confidential VMs</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-96" date="1720699200">- vdpa: Fix bug where vdpa appliance migration does not resume after rollback
- block: Parse filenames only when explicitly requested (CVE-2024-4467)
- block: introduce bdrv_open_file_child() helper
- iotests/270: Don't store data-file with json: prefix in image (CVE-2024-4467)
- iotests/244: Don't store data-file with protocol in image (CVE-2024-4467)
- qcow2: Don't open data_file with BDRV_O_NO_IO (CVE-2024-4467)
- qcow2: Do not reopen data_file in invalidate_cache
- hw/intc/arm_gic: Fix deactivation of SPI lines chery-pick from 7175a562f157d39725ab396e39c1e8e410d206b3
- vhost-user: Skip unnecessary duplicated VHOST_USER_SET_LOG_BASE requests
- target/ppc: Split off common embedded TLB init cheery-pick from 581eea5d656b73c6532109f4ced4c73fd4e5fd47`
- vdpa: fix vdpa device migrate rollback wrong when suspend device failed 1. 
- hw/virtio/virtio-pci:Support shadow device for virtio-net/blk/scsi devices</changelog>
</package>
<package pkgid="f1a5f49564581fc63d048f3b9cd13d9ec996cc5370033f353226e6e04cef4da5" name="qemu" arch="src">
  <version epoch="10" ver="6.2.0" rel="97.oe2203sp1"/>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-88" date="1708516800">- ui/vnc.c: Fixed a deadlock bug.
- hw/i386: Fix comment style in topology.h
- migration/multifd: Remove unnecessary usage of local Error
- linux-user: fix sockaddr_in6 endianness
- vhost_vdpa: fix the input in trace_vhost_vdpa_listener_region_del()
- iotests: fix 194: filter out racy postcopy-active event
- tests/avocado: fix waiting for vm shutdown in replay_linux
- ui/vnc: fix debug output for invalid audio message</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-89" date="1709985600">- qga-win: Fix guest-get-fsinfo multi-disks collection
- hw/timer: fix systick trace message
- virtio-net: correctly copy vnet header when flushing TX (CVE-2023-6693)
- ui/clipboard: mark type as not available when there is no data (CVE-2023-6683)
- esp: restrict non-DMA transfer length to that of available data (CVE-2024-24474)
- hw/scsi/lsi53c895a: add missing decrement of reentrancy counter
- hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
- net: Update MemReentrancyGuard for NIC (CVE-2023-3019)
- net: Provide MemReentrancyGuard * to qemu_new_nic()</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-90" date="1711195200">- i386/cpuid: Move leaf 7 to correct group
- i386/cpuid: Decrease cpuid_i when skipping CPUID leaf 1F
- i386/cpu: Mask with XCR0/XSS mask for FEAT_XSAVE_XCR0_HI and FEAT_XSAVE_XSS_HI leafs
- i386/cpu: Clear FEAT_XSAVE_XSS_LO/HI leafs when CPUID_EXT_XSAVE is not available
- target/i386: Change wrong XFRM value in SGX CPUID leaf
- target/i386: Enable support for XSAVES based features
- target/i386: Add kvm_get_one_msr helper
- hw/block/hd-geometry: Do not override specified bios-chs-trans mainline inclusion commit fd8a68ad6823d33bedeba20a22857867a1c3890e category: bugfix
- linux-user/riscv: Align signal frame to 16 bytes mainline inclusion commit 1eaa63429a9944265c92efdb94c02fabb231f564 category: bugfix
- ipmi:smbus: Add a check around a memcpy mainline inclusion commit 3fde641e7286f9b968bdb3b4b922c6465f2a9abc category: bugfix
- tests/tcg/linux-test: Fix random hangs in test_socket mainline inclusion commit b9e6074fc5b429b1e956e9c60db7e284a91e0f3d category: bugfix
- qemu-options.hx: Don't claim "-serial" has limit of 4 serial ports Before v2.12, the implementation of serial ports was limited to a value of MAX_SERIAL_PORTS = 4. We now dynamically allocate the data structures for serial ports, so this limit is no longer present, but the documentation for the -serial options still reads:
- target/ppc: Modify the uncorrect value irq to n_IRQ
- block-migration: Ensure we don't crash during migration cleanup
- target/s390x: fix handling of zeroes in vfmin/vfmax mainline inclusion commit 13c59eb09bd6d1fbc13f08b708226421f14a232b category: bugfix
- hw/virtio/virtio-iommu: Enforce power-of-two notify for both MAP and UNMAP mainline inclusion commit 0522be9a0c0094088ccef7aab352c57f483ca250 category: bugfix
- configure: Add missing POSIX-required space mainline inclusion commit 35a7a6fc5624b1df828d82f2dfa74d0e4188b3b2 category: bugfix
- vga: fix incorrect line height in 640x200x2 mode mainline inclusion commit 37e7b86766244b62a406747bb78e049390d0b528 category: bugfix
- hw/ide/core: set ERR_STAT in unsupported command completion
- linux-user/flatload.c: Fix setting of  image_info::end_code mainline inclusion commit 734a659ad264ac080457167e845ffabbaaa66d0e category: bugfix
- load_elf: fix iterator's type for elf file processing
- hw/misc/mps2-scc: Free MPS2SCC::oscclk[] array on finalize()
- hw/nvram/xlnx-efuse: Free XlnxEFuse::ro_bits[] array on finalize()
- hw/nvram/xlnx-efuse-ctrl: Free XlnxVersalEFuseCtrl[] "pg0-lock" array
- chardev/char.c: fix "abstract device type" error message
- block/rbd: fix handling of holes in .bdrv_co_block_status
- qga: treat get-guest-fsinfo as "best effort" mainline inclusion commit bbb0151cf2e82489120a15df5e2eb9653312b0ec category: bugfix
- usb/hcd-xhci: check slotid in  xhci_wakeup_endpoint() mainline inclusion commit 84218892f05515d20347fde4506e1944eb11cb25 category: bugfix
- hw/display/bcm2835_fb: Fix framebuffer allocation  address mainline inclusion commit 5865d99fe88d8c8fa437c18c6b63fb2a8165634f category: bugfix
- block/parallels: Fix buffer-based write call mainline inclusion commit eba088f91d21d9e42a81bef847173da30c5da961 category: bugfix
- vl: Improve error message for conflicting -incoming and -loadvm
- hw/smbios: Fix OEM strings table option validation</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-91" date="1713787200">- hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs(CVE-2024-3446)
- hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs(CVE-2024-3446)
- hw/display/virtio-gpu: Protect from DMA re-entrancy bugs(CVE-2024-3446)
- hw/virtio: Introduce virtio_bh_new_guarded() helper
- hw: replace most qemu_bh_new calls with qemu_bh_new_guarded
- checkpatch: add qemu_bh_new/aio_bh_new checks
- async: avoid use-after-free on re-entrancy guard
- async: Add an optional reentrancy guard to the BH API
- hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set(CVE-2024-3447)
- rtl8139: Remove unused variable
- tulip: Remove unused variable
- virtio-mem: Fix the bitmap index of the section offset
- virtio-mem: Fix the iterator variable in a vmem-&gt;rdl_list loop
- system/memory: use ldn_he_p/stn_he_p
- block: Fix crash when loading snapshot on inactive node
- smmu: Clear SMMUPciBus pointer cache when system reset
- block/mirror: Fix NULL s-&gt;job in active writes
- amd_iommu: Fix APIC address check
- virtio-crypto: fix NULL pointer dereference in virtio_crypto_free_reques
- libqos/virtio.c: Correct 'flags' reading in qvirtqueue_kick
- ivshmem-test.c: enable test_ivshmem_server for ppc64 arch
- ivshmem.c: change endianness to LITTLE_ENDIAN
- hw/ppc/mac.h: Remove MAX_CPUS macro
- configure: remove dead variables
- virtio-gpu: do not byteswap padding
- hw/intc: clean-up error reporting for failed ITS cmd
- qemu-iotests: Discard stderr when probing devices
- linux-user: un-parent OBJECT(cpu) when closing thread
- hw/net/rocker: Avoid undefined shifts with more than 31 ports
- contrib/vhost-user-blk: Clean up deallocation of VuVirtqElement
- scsi-disk: fix overflow when block size is not a multiple of BDRV_SECTOR_SIZE</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-92" date="1718280000">- s390x/sclp: Simplify get_sclp_device() 
- target/ppc: Remove msr_pr macro
- docs/system/target-arm: Re-alphabetize board list
- migration: Extend query-migrate to provide dirty page limit info
- migration: Implement dirty-limit convergence algo
- migration: Put the detection logic before auto-converge checking
- migration: Refactor auto-converge capability logic
- migration: Introduce dirty-limit capability
- qapi/migration: Introduce vcpu-dirty-limit parameters
- qapi/migration: Introduce x-vcpu-dirty-limit-period parameter
- Change the value of no_ged from true to false
- Allow UNIX socket option for VNC websocket
- tpm_emulator: Avoid double initialization during
- chardev/char-socket: Update AF_UNIX for Windows
- KVM: dirty ring: add missing memory barrier
- i386: reset KVM nested state upon CPU reset
- esp: Handle CMD_BUSRESET by resetting the SCSI bus
- dbus-vmstate: Restrict error checks to registered proxies in dbus_get_proxies
- vfio/pci: Add Ascend310b scend910b support
- target/i386: Export RFDS bit to guests
- target/i386: Add new CPU model SierraForest
- target/i386: Introduce Icelake-Server-v7 to enable TSX
- hw/virtio: handle un-configured shutdown in virtio-pci
- target/s390x: display deprecation status in '-cpu  help'
- target/i386: display deprecation status in '-cpu  help'
- pc-bios/s390-ccw: Fix booting with logical block size &lt; physical block size</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-93" date="1718452800">- cvm: bug-fix for macro isolation
- tests/qtest: ahci-test: add test exposing reset issue with pending callback (Fix CVE-2023-5088)
- hw/ide: reset: cancel async DMA operation before resetting state (Fix CVE-2023-5088)
- Add support for the virtcca cvm feature.</changelog>
  <changelog author="&lt;liupingwei@huawei.com&gt; - 10:6.2.0-94" date="1718712000">- hw/arm/virt: Disable DTB randomness for confidential VMs</changelog>
  <changelog author="&lt;liupingwei@huawei.com&gt; - 10:6.2.0-95" date="1718971200">- cvm: bug-fix for disable DTB randomness for confidential VMs</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-96" date="1720699200">- vdpa: Fix bug where vdpa appliance migration does not resume after rollback
- block: Parse filenames only when explicitly requested (CVE-2024-4467)
- block: introduce bdrv_open_file_child() helper
- iotests/270: Don't store data-file with json: prefix in image (CVE-2024-4467)
- iotests/244: Don't store data-file with protocol in image (CVE-2024-4467)
- qcow2: Don't open data_file with BDRV_O_NO_IO (CVE-2024-4467)
- qcow2: Do not reopen data_file in invalidate_cache
- hw/intc/arm_gic: Fix deactivation of SPI lines chery-pick from 7175a562f157d39725ab396e39c1e8e410d206b3
- vhost-user: Skip unnecessary duplicated VHOST_USER_SET_LOG_BASE requests
- target/ppc: Split off common embedded TLB init cheery-pick from 581eea5d656b73c6532109f4ced4c73fd4e5fd47`
- vdpa: fix vdpa device migrate rollback wrong when suspend device failed 1. 
- hw/virtio/virtio-pci:Support shadow device for virtio-net/blk/scsi devices</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-97" date="1723550400">- nbd/server: CVE-2024-7409: Close stray clients at server-stop
- main-loop.h: introduce qemu_in_main_thread()
- aio-wait.h: introduce AIO_WAIT_WHILE_UNLOCKED
- nbd/server: CVE-2024-7409: Drop non-negotiating clients
- nbd/server: CVE-2024-7409: Cap default max-connections to 100
- nbd/server: Plumb in new args to nbd_client_add()
- nbd: Minor style and typo fixes</changelog>
</package>
<package pkgid="dcad6beaeab190da3d1a2d2ead5282495bc405496d23864473e35a4bdc3e8a7c" name="qemu" arch="src">
  <version epoch="10" ver="6.2.0" rel="99.oe2203sp1"/>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-90" date="1711195200">- i386/cpuid: Move leaf 7 to correct group
- i386/cpuid: Decrease cpuid_i when skipping CPUID leaf 1F
- i386/cpu: Mask with XCR0/XSS mask for FEAT_XSAVE_XCR0_HI and FEAT_XSAVE_XSS_HI leafs
- i386/cpu: Clear FEAT_XSAVE_XSS_LO/HI leafs when CPUID_EXT_XSAVE is not available
- target/i386: Change wrong XFRM value in SGX CPUID leaf
- target/i386: Enable support for XSAVES based features
- target/i386: Add kvm_get_one_msr helper
- hw/block/hd-geometry: Do not override specified bios-chs-trans mainline inclusion commit fd8a68ad6823d33bedeba20a22857867a1c3890e category: bugfix
- linux-user/riscv: Align signal frame to 16 bytes mainline inclusion commit 1eaa63429a9944265c92efdb94c02fabb231f564 category: bugfix
- ipmi:smbus: Add a check around a memcpy mainline inclusion commit 3fde641e7286f9b968bdb3b4b922c6465f2a9abc category: bugfix
- tests/tcg/linux-test: Fix random hangs in test_socket mainline inclusion commit b9e6074fc5b429b1e956e9c60db7e284a91e0f3d category: bugfix
- qemu-options.hx: Don't claim "-serial" has limit of 4 serial ports Before v2.12, the implementation of serial ports was limited to a value of MAX_SERIAL_PORTS = 4. We now dynamically allocate the data structures for serial ports, so this limit is no longer present, but the documentation for the -serial options still reads:
- target/ppc: Modify the uncorrect value irq to n_IRQ
- block-migration: Ensure we don't crash during migration cleanup
- target/s390x: fix handling of zeroes in vfmin/vfmax mainline inclusion commit 13c59eb09bd6d1fbc13f08b708226421f14a232b category: bugfix
- hw/virtio/virtio-iommu: Enforce power-of-two notify for both MAP and UNMAP mainline inclusion commit 0522be9a0c0094088ccef7aab352c57f483ca250 category: bugfix
- configure: Add missing POSIX-required space mainline inclusion commit 35a7a6fc5624b1df828d82f2dfa74d0e4188b3b2 category: bugfix
- vga: fix incorrect line height in 640x200x2 mode mainline inclusion commit 37e7b86766244b62a406747bb78e049390d0b528 category: bugfix
- hw/ide/core: set ERR_STAT in unsupported command completion
- linux-user/flatload.c: Fix setting of  image_info::end_code mainline inclusion commit 734a659ad264ac080457167e845ffabbaaa66d0e category: bugfix
- load_elf: fix iterator's type for elf file processing
- hw/misc/mps2-scc: Free MPS2SCC::oscclk[] array on finalize()
- hw/nvram/xlnx-efuse: Free XlnxEFuse::ro_bits[] array on finalize()
- hw/nvram/xlnx-efuse-ctrl: Free XlnxVersalEFuseCtrl[] "pg0-lock" array
- chardev/char.c: fix "abstract device type" error message
- block/rbd: fix handling of holes in .bdrv_co_block_status
- qga: treat get-guest-fsinfo as "best effort" mainline inclusion commit bbb0151cf2e82489120a15df5e2eb9653312b0ec category: bugfix
- usb/hcd-xhci: check slotid in  xhci_wakeup_endpoint() mainline inclusion commit 84218892f05515d20347fde4506e1944eb11cb25 category: bugfix
- hw/display/bcm2835_fb: Fix framebuffer allocation  address mainline inclusion commit 5865d99fe88d8c8fa437c18c6b63fb2a8165634f category: bugfix
- block/parallels: Fix buffer-based write call mainline inclusion commit eba088f91d21d9e42a81bef847173da30c5da961 category: bugfix
- vl: Improve error message for conflicting -incoming and -loadvm
- hw/smbios: Fix OEM strings table option validation</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-91" date="1713787200">- hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs(CVE-2024-3446)
- hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs(CVE-2024-3446)
- hw/display/virtio-gpu: Protect from DMA re-entrancy bugs(CVE-2024-3446)
- hw/virtio: Introduce virtio_bh_new_guarded() helper
- hw: replace most qemu_bh_new calls with qemu_bh_new_guarded
- checkpatch: add qemu_bh_new/aio_bh_new checks
- async: avoid use-after-free on re-entrancy guard
- async: Add an optional reentrancy guard to the BH API
- hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set(CVE-2024-3447)
- rtl8139: Remove unused variable
- tulip: Remove unused variable
- virtio-mem: Fix the bitmap index of the section offset
- virtio-mem: Fix the iterator variable in a vmem-&gt;rdl_list loop
- system/memory: use ldn_he_p/stn_he_p
- block: Fix crash when loading snapshot on inactive node
- smmu: Clear SMMUPciBus pointer cache when system reset
- block/mirror: Fix NULL s-&gt;job in active writes
- amd_iommu: Fix APIC address check
- virtio-crypto: fix NULL pointer dereference in virtio_crypto_free_reques
- libqos/virtio.c: Correct 'flags' reading in qvirtqueue_kick
- ivshmem-test.c: enable test_ivshmem_server for ppc64 arch
- ivshmem.c: change endianness to LITTLE_ENDIAN
- hw/ppc/mac.h: Remove MAX_CPUS macro
- configure: remove dead variables
- virtio-gpu: do not byteswap padding
- hw/intc: clean-up error reporting for failed ITS cmd
- qemu-iotests: Discard stderr when probing devices
- linux-user: un-parent OBJECT(cpu) when closing thread
- hw/net/rocker: Avoid undefined shifts with more than 31 ports
- contrib/vhost-user-blk: Clean up deallocation of VuVirtqElement
- scsi-disk: fix overflow when block size is not a multiple of BDRV_SECTOR_SIZE</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-92" date="1718280000">- s390x/sclp: Simplify get_sclp_device() 
- target/ppc: Remove msr_pr macro
- docs/system/target-arm: Re-alphabetize board list
- migration: Extend query-migrate to provide dirty page limit info
- migration: Implement dirty-limit convergence algo
- migration: Put the detection logic before auto-converge checking
- migration: Refactor auto-converge capability logic
- migration: Introduce dirty-limit capability
- qapi/migration: Introduce vcpu-dirty-limit parameters
- qapi/migration: Introduce x-vcpu-dirty-limit-period parameter
- Change the value of no_ged from true to false
- Allow UNIX socket option for VNC websocket
- tpm_emulator: Avoid double initialization during
- chardev/char-socket: Update AF_UNIX for Windows
- KVM: dirty ring: add missing memory barrier
- i386: reset KVM nested state upon CPU reset
- esp: Handle CMD_BUSRESET by resetting the SCSI bus
- dbus-vmstate: Restrict error checks to registered proxies in dbus_get_proxies
- vfio/pci: Add Ascend310b scend910b support
- target/i386: Export RFDS bit to guests
- target/i386: Add new CPU model SierraForest
- target/i386: Introduce Icelake-Server-v7 to enable TSX
- hw/virtio: handle un-configured shutdown in virtio-pci
- target/s390x: display deprecation status in '-cpu  help'
- target/i386: display deprecation status in '-cpu  help'
- pc-bios/s390-ccw: Fix booting with logical block size &lt; physical block size</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-93" date="1718452800">- cvm: bug-fix for macro isolation
- tests/qtest: ahci-test: add test exposing reset issue with pending callback (Fix CVE-2023-5088)
- hw/ide: reset: cancel async DMA operation before resetting state (Fix CVE-2023-5088)
- Add support for the virtcca cvm feature.</changelog>
  <changelog author="&lt;liupingwei@huawei.com&gt; - 10:6.2.0-94" date="1718712000">- hw/arm/virt: Disable DTB randomness for confidential VMs</changelog>
  <changelog author="&lt;liupingwei@huawei.com&gt; - 10:6.2.0-95" date="1718971200">- cvm: bug-fix for disable DTB randomness for confidential VMs</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-96" date="1720699200">- vdpa: Fix bug where vdpa appliance migration does not resume after rollback
- block: Parse filenames only when explicitly requested (CVE-2024-4467)
- block: introduce bdrv_open_file_child() helper
- iotests/270: Don't store data-file with json: prefix in image (CVE-2024-4467)
- iotests/244: Don't store data-file with protocol in image (CVE-2024-4467)
- qcow2: Don't open data_file with BDRV_O_NO_IO (CVE-2024-4467)
- qcow2: Do not reopen data_file in invalidate_cache
- hw/intc/arm_gic: Fix deactivation of SPI lines chery-pick from 7175a562f157d39725ab396e39c1e8e410d206b3
- vhost-user: Skip unnecessary duplicated VHOST_USER_SET_LOG_BASE requests
- target/ppc: Split off common embedded TLB init cheery-pick from 581eea5d656b73c6532109f4ced4c73fd4e5fd47`
- vdpa: fix vdpa device migrate rollback wrong when suspend device failed 1. 
- hw/virtio/virtio-pci:Support shadow device for virtio-net/blk/scsi devices</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-97" date="1723550400">- nbd/server: CVE-2024-7409: Close stray clients at server-stop
- main-loop.h: introduce qemu_in_main_thread()
- aio-wait.h: introduce AIO_WAIT_WHILE_UNLOCKED
- nbd/server: CVE-2024-7409: Drop non-negotiating clients
- nbd/server: CVE-2024-7409: Cap default max-connections to 100
- nbd/server: Plumb in new args to nbd_client_add()
- nbd: Minor style and typo fixes</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-98" date="1724241600">- pci-host: designware: Limit value range of iATU viewport register
- hmat acpi: Fix out of bounds access due to missing use of indirection
- migration: Skip only empty block devices
- aspeed/hace: Initialize g_autofree pointer
- hw/net/vmxnet3: Fix guest-triggerable assert()
- qxl: don't assert() if device isn't yet initialized
- Avoid unaligned fetch in ladr_match()
- linux-user: Fix waitid return of siginfo_t and rusage
- hw/net/lan9118: Replace magic '2048' value by MIL_TXFIFO_SIZE definition
- stdvga: fix screen blanking
- virtio-net: drop too short packets early
- ebpf: replace deprecated bpf_program__set_socket_filter
- vhsot-user: only read reply of SET_LOG_BASE from vq 0
- cpu: add Tengyun S5000C cpu support
- hw/virtio: Fix obtain the buffer id from the last descriptor
- hw/core: ensure kernel_end never gets used undefined</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-99" date="1726660800">- target/i386: Introduce SapphireRapids-v3 to add missing features
- qtest/fuzz-lsi53c895a-test: set guest RAM to 2G
- hw/net/lan9118: Signal TSFL_INT flag when TX FIFO reaches specified level
- target/arm: Fix alignment for VLD4.32
- hw/microblaze: pass random seed to fdt
- tests/qtest: npcm7xx-emc-test: Skip checking MAC
- tests: mark io-command test as skipped if socat is missing
- tests: unit: add NULL-pointer check
- tests: test-qga: close socket on failure to connect
- vdpa:block device capacity expansion online support vdpa block device update capacity.
- virtio-net: Ensure queue index fits with RSS(CVE-2024-6505)
- nbd/server: CVE-2024-7409: Avoid use-after-free when closing server
- ppc/vof: Fix unaligned FDT property access
- vvfat: Fix reading files with non-continuous clusters
- vvfat: Fix bug in writing to middle of file
- savevm: Fix load_snapshot error path crash
- hw/dma/xilinx_axidma: Use semicolon at end of statement, not comma
- hw/remote/message.c: Don't directly invoke DeviceClass:reset
- crypto/tlscredspsk: Free username on finalize
- hw/display/vhost-user-gpu.c: fix vhost_user_gpu_chr_read()
- virtio: remove virtio_tswap16s() call in vring_packed_event_read()
- char-stdio: Restore blocking mode of stdout on exit
- hw/ppc: spapr: Use qemu_vfree() to free spapr-&gt;htab
- smbios: sanitize type from external type before checking have_fields_bitmap
- spapr_pci: fix leak in spapr_phb_vfio_get_loc_code
- KVM: use store-release to mark dirty pages as harvested
- monitor/hmp: print trace as option in help for log command
- tpm_crb: Avoid backend startup just before shutdown under Xen
- crypto/block-luks: make range overlap check more readable
- spapr: Free stdout path
- target/rx: Use target_ulong for address in LI
- virtio-pci: Fix the use of an uninitialized irqfd
- rtl8139: Fix behaviour for old kernels.
- virtio-rng: block max-bytes=0 MIME-Version: 1.0
- hw/audio/es1370: Clean up comment
- vhost-user-server: do not set memory fd non-blocking
- ui: reject extended clipboard message if not activated
- virtio-net: Fix vhost virtqueue notifiers for RSS
- hw/misc/applesmc: Fix memory leak in reset() handler</changelog>
</package>
<package pkgid="8454f806f71a945756c02bab6e616374af2da5f19f3a0ed4be6e4c23694d7726" name="qpdf" arch="src">
  <version epoch="0" ver="8.4.2" rel="4.oe2203sp1"/>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 8.4.2-3" date="1669723200">- fix missing patch when get src package from x86 architecture</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 8.4.2-4" date="1692619200">- Fix CVE-2021-25786</changelog>
</package>
<package pkgid="4032a787efcf6c0f2aaf61a3a6702a73aebbe444e5b0c9402aad97c77b4bd45a" name="qpdf" arch="src">
  <version epoch="0" ver="8.4.2" rel="5.oe2203sp1"/>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 8.4.2-3" date="1669723200">- fix missing patch when get src package from x86 architecture</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 8.4.2-4" date="1692619200">- Fix CVE-2021-25786</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 8.4.2-5" date="1722859200">- Fix CVE-2022-34503</changelog>
</package>
<package pkgid="4f1eb205e3a108a4d348c74c99d2d0b876d08b0c65502d3bb2e9f1fb06775965" name="qt" arch="src">
  <version epoch="1" ver="4.8.7" rel="53.oe2203sp1"/>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 1:4.8.7-52" date="1683547200">- add loongarch64 support for qt</changelog>
  <changelog author="peijiankang&lt;peijiankang@kylinos.cn&gt; - 1:4.8.7-53" date="1692619200">- Type:cves
- ID:CVE-2023-32573
- SUG:NA
- DESC:fix CVE-2023-32573</changelog>
</package>
<package pkgid="7187ab247c1ac3517db23a1652576306c06762c733cac21d083e77c205ecceb4" name="qt" arch="src">
  <version epoch="1" ver="4.8.7" rel="55.oe2203sp1"/>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 1:4.8.7-52" date="1683547200">- add loongarch64 support for qt</changelog>
  <changelog author="peijiankang&lt;peijiankang@kylinos.cn&gt; - 1:4.8.7-53" date="1692619200">- Type:cves
- ID:CVE-2023-32573
- SUG:NA
- DESC:fix CVE-2023-32573</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1:4.8.7-54" date="1694433600">- fix sw_64 build error and exclude loongarch64 sw_64 qtdemo</changelog>
  <changelog author="peijiankang&lt;peijiankang@kylinos.cn&gt; - 1:4.8.7-55" date="1698926400">- Type:cves
- ID:CVE-2023-34410
- SUG:NA
- DESC:fix CVE-2023-34410</changelog>
</package>
<package pkgid="373876fcad27186b1db433a252d8e79eff6c73616c37be04f4dcd0e9e645369c" name="qt" arch="src">
  <version epoch="1" ver="4.8.7" rel="58.oe2203sp1"/>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 1:4.8.7-52" date="1683547200">- add loongarch64 support for qt</changelog>
  <changelog author="peijiankang&lt;peijiankang@kylinos.cn&gt; - 1:4.8.7-53" date="1692619200">- Type:cves
- ID:CVE-2023-32573
- SUG:NA
- DESC:fix CVE-2023-32573</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1:4.8.7-54" date="1694433600">- fix sw_64 build error and exclude loongarch64 sw_64 qtdemo</changelog>
  <changelog author="peijiankang&lt;peijiankang@kylinos.cn&gt; - 1:4.8.7-55" date="1698926400">- Type:cves
- ID:CVE-2023-34410
- SUG:NA
- DESC:fix CVE-2023-34410</changelog>
  <changelog author="hua_yadong&lt;huayadong@kylinos.cn&gt; - 1:4.8.7-56" date="1700827200">- Type:cves
- ID:CVE-2023-38197
- SUG:NA
- DESC:fix CVE-2023-38197</changelog>
  <changelog author="hua_yadong&lt;huayadong@kylinos.cn&gt; - 1:4.8.7-57" date="1700913600">- Type:cves
- ID:CVE-2023-37369
- SUG:NA
- DESC:fix CVE-2023-37369</changelog>
  <changelog author="hua_yadong&lt;huayadong@kylinos.cn&gt; - 1:4.8.7-58" date="1701086400">- Type:cves
- ID:CVE-2023-43114
- SUG:NA
- DESC:fix CVE-2023-43114</changelog>
</package>
<package pkgid="eac1cbd9598984dd3495836df0f2781d2161b53a8192e63d1ca3efd5e94bbda4" name="qt5-qtbase" arch="src">
  <version epoch="0" ver="5.15.2" rel="11.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.15.2-2" date="1658836800">- Fix CVE-2021-38593 and CVE-2022-25255</changelog>
  <changelog author="peijiankang &lt;peijiankang@kylinos.cn&gt; - 5.15.2-3" date="1658923200">- remove unnecessary file</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 5.15.2-4" date="1666699200">- Add sw64 architecture</changelog>
  <changelog author="huajingyun &lt;huajingyun@loongson.cn&gt; - 5.15.2-5" date="1670846400">- add loongarch64 support</changelog>
  <changelog author="douyan &lt;douyan@kylinos.cn&gt; - 5.15.2-6" date="1682683200">- fix CVE-2023-24607</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 5.15.2-7" date="1687953600">- Fix CVE-2023-32762 and CVE-2023-32763</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.15.2-8" date="1693569600">- Fix CVE-2023-37369</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 5.15.2-9" date="1694001600">- add loongarch64 and sw_64 syscall_fork support</changelog>
  <changelog author="peijiankang &lt;peijiankang@kylinos.cn&gt; - 5.15.2-10" date="1698840000">- fix CVE-2023-33285</changelog>
  <changelog author="peijiankang &lt;peijiankang@kylinos.cn&gt; - 5.15.2-11" date="1698926400">- fix CVE-2023-34410</changelog>
</package>
<package pkgid="89d923dcce0e992ec65d7c1e2affd862687b1104fc0fe9a4da64ba3f264ec494" name="qt5-qtbase" arch="src">
  <version epoch="0" ver="5.15.2" rel="14.oe2203sp1"/>
  <changelog author="huajingyun &lt;huajingyun@loongson.cn&gt; - 5.15.2-5" date="1670846400">- add loongarch64 support</changelog>
  <changelog author="douyan &lt;douyan@kylinos.cn&gt; - 5.15.2-6" date="1682683200">- fix CVE-2023-24607</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 5.15.2-7" date="1687953600">- Fix CVE-2023-32762 and CVE-2023-32763</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.15.2-8" date="1693569600">- Fix CVE-2023-37369</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 5.15.2-9" date="1694001600">- add loongarch64 and sw_64 syscall_fork support</changelog>
  <changelog author="peijiankang &lt;peijiankang@kylinos.cn&gt; - 5.15.2-10" date="1698840000">- fix CVE-2023-33285</changelog>
  <changelog author="peijiankang &lt;peijiankang@kylinos.cn&gt; - 5.15.2-11" date="1698926400">- fix CVE-2023-34410</changelog>
  <changelog author="hua_yadong &lt;huayadong@kylinos.cn&gt; - 5.15.2-12" date="1700827200">- fix qtbase5.15.2-CVE-2023-38197.patch</changelog>
  <changelog author="hua_yadong &lt;huayadong@kylinos.cn&gt; - 5.15.2-13" date="1700913600">- fix qtbase5.15.2-CVE-2023-43114.patch</changelog>
  <changelog author="douyan &lt;douyan@kylinos.cn&gt; - 5.15.2-14" date="1706702400">- add qtbase5.15-CVE-2023-51714.patch</changelog>
</package>
<package pkgid="d59e772752fd2ed450545d75f8370677bb02a06f63dd875fe4c49ce73e8b8e0f" name="qt5-qtbase" arch="src">
  <version epoch="0" ver="5.15.2" rel="16.oe2203sp1"/>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 5.15.2-7" date="1687953600">- Fix CVE-2023-32762 and CVE-2023-32763</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.15.2-8" date="1693569600">- Fix CVE-2023-37369</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 5.15.2-9" date="1694001600">- add loongarch64 and sw_64 syscall_fork support</changelog>
  <changelog author="peijiankang &lt;peijiankang@kylinos.cn&gt; - 5.15.2-10" date="1698840000">- fix CVE-2023-33285</changelog>
  <changelog author="peijiankang &lt;peijiankang@kylinos.cn&gt; - 5.15.2-11" date="1698926400">- fix CVE-2023-34410</changelog>
  <changelog author="hua_yadong &lt;huayadong@kylinos.cn&gt; - 5.15.2-12" date="1700827200">- fix qtbase5.15.2-CVE-2023-38197.patch</changelog>
  <changelog author="hua_yadong &lt;huayadong@kylinos.cn&gt; - 5.15.2-13" date="1700913600">- fix qtbase5.15.2-CVE-2023-43114.patch</changelog>
  <changelog author="douyan &lt;douyan@kylinos.cn&gt; - 5.15.2-14" date="1706702400">- add qtbase5.15-CVE-2023-51714.patch</changelog>
  <changelog author="peijiankang &lt;peijiankang@kylinos.cn&gt; - 5.15.2-15" date="1713355200">- add CVE-2024-25580-qtbase-5.15.diff</changelog>
  <changelog author="lvfei &lt;lvfei@kylinos.cn&gt; - 5.15.2-16" date="1713960000">- Fix CVE-2023-45935</changelog>
</package>
<package pkgid="03e08971fc55f204212124639776984c47f39123e80be3c19a82b83f248dde7f" name="qt5-qtbase" arch="src">
  <version epoch="0" ver="5.15.2" rel="7.oe2203sp1"/>
  <changelog author="hua_yadong &lt;huayadong@kylinos.cn&gt; - 5.15.2-1" date="1639224000">- update to upstream version 5.15.2</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.15.2-2" date="1658836800">- Fix CVE-2021-38593 and CVE-2022-25255</changelog>
  <changelog author="peijiankang &lt;peijiankang@kylinos.cn&gt; - 5.15.2-3" date="1658923200">- remove unnecessary file</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 5.15.2-4" date="1666699200">- Add sw64 architecture</changelog>
  <changelog author="huajingyun &lt;huajingyun@loongson.cn&gt; - 5.15.2-5" date="1670846400">- add loongarch64 support</changelog>
  <changelog author="douyan &lt;douyan@kylinos.cn&gt; - 5.15.2-6" date="1682683200">- fix CVE-2023-24607</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 5.15.2-7" date="1687953600">- Fix CVE-2023-32762 and CVE-2023-32763</changelog>
</package>
<package pkgid="733f484ae23382b5afbb8c8636a1e49f1906a44887932b1aacacadd405b0a882" name="qt5-qtbase" arch="src">
  <version epoch="0" ver="5.15.2" rel="9.oe2203sp1"/>
  <changelog author="hua_yadong &lt;huayadong@kylinos.cn&gt; - 5.15.2-1" date="1639224000">- update to upstream version 5.15.2</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.15.2-2" date="1658836800">- Fix CVE-2021-38593 and CVE-2022-25255</changelog>
  <changelog author="peijiankang &lt;peijiankang@kylinos.cn&gt; - 5.15.2-3" date="1658923200">- remove unnecessary file</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 5.15.2-4" date="1666699200">- Add sw64 architecture</changelog>
  <changelog author="huajingyun &lt;huajingyun@loongson.cn&gt; - 5.15.2-5" date="1670846400">- add loongarch64 support</changelog>
  <changelog author="douyan &lt;douyan@kylinos.cn&gt; - 5.15.2-6" date="1682683200">- fix CVE-2023-24607</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 5.15.2-7" date="1687953600">- Fix CVE-2023-32762 and CVE-2023-32763</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.15.2-8" date="1693569600">- Fix CVE-2023-37369</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 5.15.2-9" date="1694001600">- add loongarch64 and sw_64 syscall_fork support</changelog>
</package>
<package pkgid="02032af908659ebef9394b6fe0f5f6ed1927a41f870a810185a9a78a774b7b72" name="rapidjson" arch="src">
  <version epoch="0" ver="1.1.0" rel="11.oe2203sp1"/>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 1.1.0-11" date="1720699200">- Fix CVE-2024-38517</changelog>
</package>
<package pkgid="3566e7fb05ad271c0c58596016a20d08800194e13a9277c11bc6570e9487f369" name="readline" arch="src">
  <version epoch="0" ver="8.1" rel="3.oe2203sp1"/>
  <changelog author="yangzhuangzhuang &lt;yangzhuangzhuang1@huawei.com&gt; - 8.0-3" date="1624536000">- Delete useless old version dynamic library</changelog>
  <changelog author="yangzhuangzhuang &lt;yangzhuangzhuang1@huawei.com&gt; - 8.1-1" date="1638014400">- update version to 8.1</changelog>
  <changelog author="yanglongkang &lt;yanglongkang@h-partners.com&gt; - 8.1-2" date="1666699200">- rebuild for next release</changelog>
  <changelog author="chenziyang &lt;chenziyang4@huawei.com&gt; - 8.1-3" date="1686744000">- Add shell command to switch bracketed-paste mode from on to off to keep consistent with realine-8.0</changelog>
</package>
<package pkgid="7a4a0c62ceff522bf5049104058d3e1afcb5e9df62e0836619cf15dd406a1bea" name="rear" arch="src">
  <version epoch="0" ver="2.4" rel="5.oe2203sp1"/>
  <changelog author="huajingyun &lt;huajingyun@loongson.cn&gt; - 2.4-4" date="1668513600">- Add loongarch64 support</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2.4-5" date="1705320000">- Fix CVE-2024-23301 and only x86 require syslinux</changelog>
</package>
<package pkgid="2e6165307bbc979067dc05e849593785eeb9cb960ed9e8018be523b395c81d71" name="redis" arch="src">
  <version epoch="0" ver="4.0.14" rel="2.oe2203sp1"/>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 4.0.11-15" date="1617796800">- Fix CVE-2021-3470</changelog>
  <changelog author="huanghaitao &lt;huanghaitao8@huawei.com&gt; - 4.0.11-16" date="1622462400">- Completing build dependencies to fix gcc compiler missing error</changelog>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 4.0.11-17" date="1623153600">- Fix CVE-2021-29478</changelog>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 4.0.11-18" date="1633780800">- Fix CVE-2021-32672</changelog>
  <changelog author="zhangjiapeng &lt;zhangjiapeng9@huawei.com&gt; - 4.0.14-1" date="1640779200">- Update to 4.0.14</changelog>
  <changelog author="wushaozheng&lt;wushaozheng@ncti-gba.cn&gt; - 4.0.14-2" date="1679918400">- Fix CVE-2022-36021.patch</changelog>
</package>
<package pkgid="3dc3c7a7bf9479df1cbcd51e9e40b473bcfbcc0c1cfe2280ff3d3e7fddc873a3" name="redis" arch="src">
  <version epoch="0" ver="4.0.14" rel="5.oe2203sp1"/>
  <changelog author="huanghaitao &lt;huanghaitao8@huawei.com&gt; - 4.0.11-16" date="1622462400">- Completing build dependencies to fix gcc compiler missing error</changelog>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 4.0.11-17" date="1623153600">- Fix CVE-2021-29478</changelog>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 4.0.11-18" date="1633780800">- Fix CVE-2021-32672</changelog>
  <changelog author="zhangjiapeng &lt;zhangjiapeng9@huawei.com&gt; - 4.0.14-1" date="1640779200">- Update to 4.0.14</changelog>
  <changelog author="wushaozheng&lt;wushaozheng@ncti-gba.cn&gt; - 4.0.14-2" date="1679918400">- Fix CVE-2022-36021.patch</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 4.0.14-3" date="1680523200">- Add sw64 architecture</changelog>
  <changelog author="huajingyun&lt;huajingyun@loongson.cn&gt; - 4.0.14-4" date="1680523201">- Update config.guess and config.sub for loongarch</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 4.0.14-5" date="1684152000">- Fix CVE-2023-28856</changelog>
</package>
<package pkgid="4907131dd3e17bbad76d7047e4792dc8d299ebbc7490835e5866a50c71f7dc07" name="redis" arch="src">
  <version epoch="0" ver="4.0.14" rel="6.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 4.0.11-18" date="1633780800">- Fix CVE-2021-32672</changelog>
  <changelog author="zhangjiapeng &lt;zhangjiapeng9@huawei.com&gt; - 4.0.14-1" date="1640779200">- Update to 4.0.14</changelog>
  <changelog author="wushaozheng&lt;wushaozheng@ncti-gba.cn&gt; - 4.0.14-2" date="1679918400">- Fix CVE-2022-36021.patch</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 4.0.14-3" date="1680523200">- Add sw64 architecture</changelog>
  <changelog author="huajingyun&lt;huajingyun@loongson.cn&gt; - 4.0.14-4" date="1680523201">- Update config.guess and config.sub for loongarch</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 4.0.14-5" date="1684152000">- Fix CVE-2023-28856</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 4.0.14-6" date="1690804800">- Fix CVE-2022-24834</changelog>
</package>
<package pkgid="9ebb2bf7b83105a4e16f1065bbf27b10710685c0efbb45eeff0efa787e6f8f77" name="ros-noetic-ros-nodelet_core" arch="src">
  <version epoch="0" ver="1.10.1" rel="1.oe2203sp1"/>
  <changelog author="openEuler Buildteam &lt;hanhaomin008@126.com&gt; - 1.10.1-1" date="1608033600">- Package init</changelog>
</package>
<package pkgid="1a86d1104113bccda0379bbfebe0dbb249b41525f077c3f9eeb7715bb6315159" name="rpm" arch="src">
  <version epoch="0" ver="4.17.0" rel="32.oe2203sp1"/>
  <changelog author="xujing&lt;xujing125@huawei.com&gt; - 4.17.0-23" date="1672056000">- backport patches from upstream to fix resource leak</changelog>
  <changelog author="renhongxun&lt;renhongxun@h-partners.com&gt; - 4.17.0-24" date="1677585600">- bugfix with upstream patches about fifo</changelog>
  <changelog author="renhongxun&lt;renhongxun@h-partners.com&gt; - 4.17.0-25" date="1686657600">- Fix a copy-paste --help description of --whatconflicts</changelog>
  <changelog author="renhongxun&lt;renhongxun@h-partners.com&gt; - 4.17.0-26" date="1686916800">- Fix a segfault on a non-stringable argument to macro call from Lua</changelog>
  <changelog author="renhongxun&lt;renhongxun@h-partners.com&gt; - 4.17.0-27" date="1690977600">- backport some patches from upstream</changelog>
  <changelog author="renhongxun&lt;renhongxun@h-partners.com&gt; - 4.17.0-28" date="1693310400">- Check inside --root when querying for files</changelog>
  <changelog author="renhongxun&lt;renhongxun@h-partners.com&gt; - 4.17.0-29" date="1693915200">- Fix the coredump which may occur during upgrading of rpm</changelog>
  <changelog author="renhongxun&lt;renhongxun@h-partners.com&gt; - 4.17.0-30" date="1694174400">- support _disable_auto_rebuilddb macro in posttrans</changelog>
  <changelog author="renhongxun&lt;renhongxun@h-partners.com&gt; - 4.17.0-31" date="1695729600">- Fix potential segmentation fault</changelog>
  <changelog author="renhongxun&lt;renhongxun@h-partners.com&gt; - 4.17.0-32" date="1702555200">- Fix regression on ctrl-c during transaction killing scriptlets</changelog>
</package>
<package pkgid="ef5b6cdeee230d71f39027051e74891a561f9c64479de281d1feef877abd23c0" name="rpm" arch="src">
  <version epoch="0" ver="4.17.0" rel="33.oe2203sp1"/>
  <changelog author="renhongxun&lt;renhongxun@h-partners.com&gt; - 4.17.0-24" date="1677585600">- bugfix with upstream patches about fifo</changelog>
  <changelog author="renhongxun&lt;renhongxun@h-partners.com&gt; - 4.17.0-25" date="1686657600">- Fix a copy-paste --help description of --whatconflicts</changelog>
  <changelog author="renhongxun&lt;renhongxun@h-partners.com&gt; - 4.17.0-26" date="1686916800">- Fix a segfault on a non-stringable argument to macro call from Lua</changelog>
  <changelog author="renhongxun&lt;renhongxun@h-partners.com&gt; - 4.17.0-27" date="1690977600">- backport some patches from upstream</changelog>
  <changelog author="renhongxun&lt;renhongxun@h-partners.com&gt; - 4.17.0-28" date="1693310400">- Check inside --root when querying for files</changelog>
  <changelog author="renhongxun&lt;renhongxun@h-partners.com&gt; - 4.17.0-29" date="1693915200">- Fix the coredump which may occur during upgrading of rpm</changelog>
  <changelog author="renhongxun&lt;renhongxun@h-partners.com&gt; - 4.17.0-30" date="1694174400">- support _disable_auto_rebuilddb macro in posttrans</changelog>
  <changelog author="renhongxun&lt;renhongxun@h-partners.com&gt; - 4.17.0-31" date="1695729600">- Fix potential segmentation fault</changelog>
  <changelog author="renhongxun&lt;renhongxun@h-partners.com&gt; - 4.17.0-32" date="1702555200">- Fix regression on ctrl-c during transaction killing scriptlets</changelog>
  <changelog author="gengqihu&lt;gengqihu2@h-partners.com&gt; - 4.17.0-33" date="1708516800">- Modify the version of zstd in Requires</changelog>
</package>
<package pkgid="93dfc6137111b1fdc6d782456c8c8504c262ea4f340cba3e4fa7c8ad9684f8e5" name="rpmrebuild" arch="src">
  <version epoch="0" ver="2.16" rel="12.oe2203sp1"/>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 2.16-3" date="1656417600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix the CreateBuildRoot error when using rpmrebuild command</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 2.16-4" date="1666094400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:change the uid and gid of directories newly created when run with --change-files</changelog>
  <changelog author="xujing &lt;xujing125@huawei.com&gt; - 2.16-5" date="1667908800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix spelling errors that could mislead users</changelog>
  <changelog author="xujing &lt;xujing125@huawei.com&gt; - 2.16-6" date="1667908801">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix --cap-from-fs does not work</changelog>
  <changelog author="xujing &lt;xujing125@huawei.com&gt; - 2.16-7" date="1667908802">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix --comment-missing=n does not work</changelog>
  <changelog author="xujing &lt;xujing125@huawei.com&gt; - 2.16-8" date="1667908803">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix -r does not work</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 2.16-9" date="1669377600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:modify the patch name for the problem of vendor hard code</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 2.16-10" date="1705060800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix errors found from shellcheck scan</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 2.16-11" date="1705320000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix failure when recompiling noarch rpm and remove the require to rpm-build</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 2.16-12" date="1705665600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:revert: remove the require to rpm-build.For consistency with other community-released dependencies</changelog>
</package>
<package pkgid="d87fcbcda8ac186254689b9e1ac17e25e7265c4bc6ec845c42d45b3b8b1d9248" name="rsyslog" arch="src">
  <version epoch="0" ver="8.2110.0" rel="14.oe2203sp1"/>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 8.2110.0-5" date="1646049600">- update timezone when restart rsyslog</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 8.2110.0-6" date="1646049601">- Increase the limit on restart frequency</changelog>
  <changelog author="wuchaochao &lt;wuchaochao4@huawei.com&gt; - 8.2110.0-7" date="1647259200">- change startlimitburst spelling errors</changelog>
  <changelog author="wuchaochao &lt;cyanrose@yeah.net&gt; - 8.2110.0-8" date="1648209600">- add systemd_lived macro</changelog>
  <changelog author="zhanghaolian &lt;zhanghaolian@huawei.com&gt; - 8.2110.0-9" date="1653307200">- fix CVE-2022-24903</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 8.2110.0-10" date="1659614400">- backport patches from upstream and enable check</changelog>
  <changelog author="huangduirong &lt;huangduirong@huawei.com&gt; - 8.2110.0-11" date="1665403200">- Type:NA
- ID:NA
- SUG:NA
- DESC:remove the sphinx-build in prep</changelog>
  <changelog author="huangduirong &lt;huangduirong@huawei.com&gt; - 8.2110.0-12" date="1665662400">- Type:NA
- ID:NA
- SUG:NA
- DESC:fix build failed</changelog>
  <changelog author="pengyi &lt;pengyi37@huawei.com&gt; - 8.2110.0-13" date="1671278400">- Type:NA
- ID:NA
- SUG:NA
- DESC: backport patches from upstream</changelog>
  <changelog author="pengyi &lt;pengyi37@huawei.com&gt; - 8.2110.0-14" date="1671883200">- Type:NA
- ID:NA
- SUG:NA
- DESC: backport patches from upstream</changelog>
</package>
<package pkgid="9ca676e7ea55fbbc69491bb62a168c3cd76e7e4dc6476cade4706434f87f6379" name="rsyslog" arch="src">
  <version epoch="0" ver="8.2110.0" rel="19.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 8.2110.0-10" date="1659614400">- backport patches from upstream and enable check</changelog>
  <changelog author="huangduirong &lt;huangduirong@huawei.com&gt; - 8.2110.0-11" date="1665403200">- Type:NA
- ID:NA
- SUG:NA
- DESC:remove the sphinx-build in prep</changelog>
  <changelog author="huangduirong &lt;huangduirong@huawei.com&gt; - 8.2110.0-12" date="1665662400">- Type:NA
- ID:NA
- SUG:NA
- DESC:fix build failed</changelog>
  <changelog author="pengyi &lt;pengyi37@huawei.com&gt; - 8.2110.0-13" date="1671278400">- Type:NA
- ID:NA
- SUG:NA
- DESC: backport patches from upstream</changelog>
  <changelog author="pengyi &lt;pengyi37@huawei.com&gt; - 8.2110.0-14" date="1671883200">- Type:NA
- ID:NA
- SUG:NA
- DESC: backport patches from upstream</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 8.2110.0-15" date="1686052800">- Type:NA
- ID:NA
- SUG:NA
- DESC:omprog bugfix: invalid status handling at called program
       core bugfix: template system may generate invalid json</changelog>
  <changelog author="linzhuorong &lt;linzhuorong@huawei.com&gt; - 8.2110.0-16" date="1687694400">- Type:NA
- ID:NA
- SUG:NA
- DESC: OpenSSL: fix depreacted API issues for OpenSSL 3.x
        MMDBLOOKUP::FIXED:: Don't crash Rsyslog on mmdb
        support sha256 for StreamDriverAuthMode="x509/fingerprint"
        imjournal: add second fallback to _COMM
        bugfix: prevent pot. segfault when switchung to
        core/bugfix: using $uuid msg prop can deadlock rsyslog on shutdown
        GNUTls Driver: Fix memory leaks in gtlsInitCred</changelog>
  <changelog author="renyi &lt;977713017@qq.com&gt; - 8.2110.0-17" date="1696939200">- Type:NA
- ID:NA
- SUG:NA
- DESC: support clang compile</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 8.2110.0-18" date="1698667200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:adapt for non-systemd scenario</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 8.2110.0-19" date="1710936000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:tcp net subsystem: handle data race gracefully
       fix startup issue on modern systemd systems
       tcpflood bugfix: plain tcp send error not properly reported
       tcpflood bugfix: TCP sending was not implemented properly
       lookup tables: fix static analyzer issue
       lookup tables bugfix: reload on HUP did not work when backgrounded
       openssl: Replaced depreceated method SSLv23_method with TLS_method
       testbench: make waiting for HUP processing more reliable
       bugfix: cosmetic data races
       mmnormalize bugfix: if msg cannot be parsed, parser chain is stopped
       core bugfix: potential segfault on busy systems
       imfile: fix ext directory's fd leak in case of inotify on symlink
       imfile tests: ext directory's fd leak in case of inotify on symlink
       testbench: fix imfile-statefile-delete.sh (INOTIFY trigger)
       imfile bugfix: message loss/duplication when monitored file is rotated
       testbench: add testcase for frequent imfile input file change
       Use runConf instead of loadConf in ratelimiting during runtime</changelog>
</package>
<package pkgid="7d8941c8ddf45c231f7319311fd822d4a7bb4c2e04b95727c4af2adfe9f60f7b" name="ruby" arch="src">
  <version epoch="0" ver="3.0.3" rel="128.oe2203sp1"/>
  <changelog author="shangyibin &lt;shangyibin1@h-partners.com&gt; - 3.0.3-119" date="1644235200">- Old version of libruby.so was kept for compatibility,remove it.</changelog>
  <changelog author="shixuantong &lt;shixuantong@h-partners.com&gt; - 3.0.3-120" date="1645617600">- Add tests for `--template-stylesheets` option</changelog>
  <changelog author="tianwei12 &lt;tianwei12@h-partners.com&gt; - 3.0.3-121" date="1646049600">- fix rubygem-rspec-support,rubygem-open4 build failed</changelog>
  <changelog author="tianwei12 &lt;tianwei12@h-partners.com&gt; - 3.0.3-122" date="1646222400">- fix conflict with rubygem-racc</changelog>
  <changelog author="shixuantong &lt;shixuantong@h-partners.com&gt; - 3.0.3-123" date="1653134400">- drop dependency on ruby-help</changelog>
  <changelog author="BruceGW &lt;gyl93216@163.com&gt; - 3.0.3-124" date="1653652800">- fix CVE-2022-28738 CVE-2022-28739</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 3.0.3-125" date="1656676800">- fix CVE-2019-19204 CVE-2019-19246 CVE-2019-16161 CVE-2019-16162 CVE-2019-16163</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 3.0.3-126" date="1663848000">- fix build failure caused by command eu-readelf not found</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 3.0.3-127" date="1663848001">- remove duplicated bigdecimal.rb file</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 3.0.3-128" date="1672920000">- fix CVE-2021-33621</changelog>
</package>
<package pkgid="14fbcb118a01df5097df017dd76e4a33eed9c52aaa37f1aa13a56ffde3020d79" name="ruby" arch="src">
  <version epoch="0" ver="3.0.3" rel="129.oe2203sp1"/>
  <changelog author="shixuantong &lt;shixuantong@h-partners.com&gt; - 3.0.3-120" date="1645617600">- Add tests for `--template-stylesheets` option</changelog>
  <changelog author="tianwei12 &lt;tianwei12@h-partners.com&gt; - 3.0.3-121" date="1646049600">- fix rubygem-rspec-support,rubygem-open4 build failed</changelog>
  <changelog author="tianwei12 &lt;tianwei12@h-partners.com&gt; - 3.0.3-122" date="1646222400">- fix conflict with rubygem-racc</changelog>
  <changelog author="shixuantong &lt;shixuantong@h-partners.com&gt; - 3.0.3-123" date="1653134400">- drop dependency on ruby-help</changelog>
  <changelog author="BruceGW &lt;gyl93216@163.com&gt; - 3.0.3-124" date="1653652800">- fix CVE-2022-28738 CVE-2022-28739</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 3.0.3-125" date="1656676800">- fix CVE-2019-19204 CVE-2019-19246 CVE-2019-16161 CVE-2019-16162 CVE-2019-16163</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 3.0.3-126" date="1663848000">- fix build failure caused by command eu-readelf not found</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 3.0.3-127" date="1663848001">- remove duplicated bigdecimal.rb file</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 3.0.3-128" date="1672920000">- fix CVE-2021-33621</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 3.0.3-129" date="1681214400">- fix CVE-2023-28755 CVE-2023-28756</changelog>
</package>
<package pkgid="265b58a5d389717cfcbc26dd3114d396f465162218b15374fe0765c476eec366" name="ruby" arch="src">
  <version epoch="0" ver="3.0.3" rel="131.oe2203sp1"/>
  <changelog author="tianwei12 &lt;tianwei12@h-partners.com&gt; - 3.0.3-122" date="1646222400">- fix conflict with rubygem-racc</changelog>
  <changelog author="shixuantong &lt;shixuantong@h-partners.com&gt; - 3.0.3-123" date="1653134400">- drop dependency on ruby-help</changelog>
  <changelog author="BruceGW &lt;gyl93216@163.com&gt; - 3.0.3-124" date="1653652800">- fix CVE-2022-28738 CVE-2022-28739</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 3.0.3-125" date="1656676800">- fix CVE-2019-19204 CVE-2019-19246 CVE-2019-16161 CVE-2019-16162 CVE-2019-16163</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 3.0.3-126" date="1663848000">- fix build failure caused by command eu-readelf not found</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 3.0.3-127" date="1663848001">- remove duplicated bigdecimal.rb file</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 3.0.3-128" date="1672920000">- fix CVE-2021-33621</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 3.0.3-129" date="1681214400">- fix CVE-2023-28755 CVE-2023-28756</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 3.0.3-130" date="1685707200">- remove rubygem-power_assert</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 3.0.3-131" date="1688817600">- fix CVE-2023-36617</changelog>
</package>
<package pkgid="d5107ff4efc53da6a9905bdeaf3a13ba60a7498dd4eb1435a2bb75dc63c2e341" name="ruby" arch="src">
  <version epoch="0" ver="3.0.3" rel="132.oe2203sp1"/>
  <changelog author="shixuantong &lt;shixuantong@h-partners.com&gt; - 3.0.3-123" date="1653134400">- drop dependency on ruby-help</changelog>
  <changelog author="BruceGW &lt;gyl93216@163.com&gt; - 3.0.3-124" date="1653652800">- fix CVE-2022-28738 CVE-2022-28739</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 3.0.3-125" date="1656676800">- fix CVE-2019-19204 CVE-2019-19246 CVE-2019-16161 CVE-2019-16162 CVE-2019-16163</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 3.0.3-126" date="1663848000">- fix build failure caused by command eu-readelf not found</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 3.0.3-127" date="1663848001">- remove duplicated bigdecimal.rb file</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 3.0.3-128" date="1672920000">- fix CVE-2021-33621</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 3.0.3-129" date="1681214400">- fix CVE-2023-28755 CVE-2023-28756</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 3.0.3-130" date="1685707200">- remove rubygem-power_assert</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 3.0.3-131" date="1688817600">- fix CVE-2023-36617</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 3.0.3-132" date="1711454400">- fix CVE-2024-27280 and CVE-2024-27281</changelog>
</package>
<package pkgid="627133e2a8848da9e0edd91db6fd347fc6c7bb8df4cec4f50cedbcb7e5bb335e" name="ruby" arch="src">
  <version epoch="0" ver="3.0.3" rel="133.oe2203sp1"/>
  <changelog author="BruceGW &lt;gyl93216@163.com&gt; - 3.0.3-124" date="1653652800">- fix CVE-2022-28738 CVE-2022-28739</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 3.0.3-125" date="1656676800">- fix CVE-2019-19204 CVE-2019-19246 CVE-2019-16161 CVE-2019-16162 CVE-2019-16163</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 3.0.3-126" date="1663848000">- fix build failure caused by command eu-readelf not found</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 3.0.3-127" date="1663848001">- remove duplicated bigdecimal.rb file</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 3.0.3-128" date="1672920000">- fix CVE-2021-33621</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 3.0.3-129" date="1681214400">- fix CVE-2023-28755 CVE-2023-28756</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 3.0.3-130" date="1685707200">- remove rubygem-power_assert</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 3.0.3-131" date="1688817600">- fix CVE-2023-36617</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 3.0.3-132" date="1711454400">- fix CVE-2024-27280 and CVE-2024-27281</changelog>
  <changelog author="zhoupengcheng11 &lt;zhoupengcheng11@huawei.com&gt; - 3.0.3-133" date="1714996800">- fix CVE-2024-27282</changelog>
</package>
<package pkgid="70e049dfeafe514c3d26ba813bec5af6380890e470ccdeb078ff35d68be45ab2" name="ruby" arch="src">
  <version epoch="0" ver="3.0.3" rel="135.oe2203sp1"/>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 3.0.3-126" date="1663848000">- fix build failure caused by command eu-readelf not found</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 3.0.3-127" date="1663848001">- remove duplicated bigdecimal.rb file</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 3.0.3-128" date="1672920000">- fix CVE-2021-33621</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 3.0.3-129" date="1681214400">- fix CVE-2023-28755 CVE-2023-28756</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 3.0.3-130" date="1685707200">- remove rubygem-power_assert</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 3.0.3-131" date="1688817600">- fix CVE-2023-36617</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 3.0.3-132" date="1711454400">- fix CVE-2024-27280 and CVE-2024-27281</changelog>
  <changelog author="zhoupengcheng11 &lt;zhoupengcheng11@huawei.com&gt; - 3.0.3-133" date="1714996800">- fix CVE-2024-27282</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 3.0.3-134" date="1716811200">- Dump plain objects as RDoc::Options so that the generated .rdoc_options file is loadable</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 3.0.3-135" date="1718712000">- fix CVE-2024-35221</changelog>
</package>
<package pkgid="493bf75525c8406b6486a27ddec159fc4b861a7dda9c24d382f72947f445fdba" name="ruby" arch="src">
  <version epoch="0" ver="3.0.3" rel="136.oe2203sp1"/>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 3.0.3-127" date="1663848000">- remove duplicated bigdecimal.rb file</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 3.0.3-128" date="1672920000">- fix CVE-2021-33621</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 3.0.3-129" date="1681214400">- fix CVE-2023-28755 CVE-2023-28756</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 3.0.3-130" date="1685707200">- remove rubygem-power_assert</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 3.0.3-131" date="1688817600">- fix CVE-2023-36617</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 3.0.3-132" date="1711454400">- fix CVE-2024-27280 and CVE-2024-27281</changelog>
  <changelog author="zhoupengcheng11 &lt;zhoupengcheng11@huawei.com&gt; - 3.0.3-133" date="1714996800">- fix CVE-2024-27282</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 3.0.3-134" date="1716811200">- Dump plain objects as RDoc::Options so that the generated .rdoc_options file is loadable</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 3.0.3-135" date="1718712000">- fix CVE-2024-35221</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 3.0.3-136" date="1720267200">- upgrade rexml to fix CVE-2024-36176</changelog>
</package>
<package pkgid="3a9aa6c5473e57989d76b94e1097b26d51bbc6e6aa84e5c0f550424d7356de6d" name="ruby" arch="src">
  <version epoch="0" ver="3.0.3" rel="137.oe2203sp1"/>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 3.0.3-128" date="1672920000">- fix CVE-2021-33621</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 3.0.3-129" date="1681214400">- fix CVE-2023-28755 CVE-2023-28756</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 3.0.3-130" date="1685707200">- remove rubygem-power_assert</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 3.0.3-131" date="1688817600">- fix CVE-2023-36617</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 3.0.3-132" date="1711454400">- fix CVE-2024-27280 and CVE-2024-27281</changelog>
  <changelog author="zhoupengcheng11 &lt;zhoupengcheng11@huawei.com&gt; - 3.0.3-133" date="1714996800">- fix CVE-2024-27282</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 3.0.3-134" date="1716811200">- Dump plain objects as RDoc::Options so that the generated .rdoc_options file is loadable</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 3.0.3-135" date="1718712000">- fix CVE-2024-35221</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 3.0.3-136" date="1720267200">- upgrade rexml to fix CVE-2024-36176</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 3.0.3-137" date="1723204800">- fix CVE-2024-41946</changelog>
</package>
<package pkgid="d83a99ea468cbce3224a4340c3f2c8e073d1971aea797f84aae21876c0801a43" name="ruby" arch="src">
  <version epoch="0" ver="3.0.3" rel="139.oe2203sp1"/>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 3.0.3-130" date="1685707200">- remove rubygem-power_assert</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 3.0.3-131" date="1688817600">- fix CVE-2023-36617</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 3.0.3-132" date="1711454400">- fix CVE-2024-27280 and CVE-2024-27281</changelog>
  <changelog author="zhoupengcheng11 &lt;zhoupengcheng11@huawei.com&gt; - 3.0.3-133" date="1714996800">- fix CVE-2024-27282</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 3.0.3-134" date="1716811200">- Dump plain objects as RDoc::Options so that the generated .rdoc_options file is loadable</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 3.0.3-135" date="1718712000">- fix CVE-2024-35221</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 3.0.3-136" date="1720267200">- upgrade rexml to fix CVE-2024-36176</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 3.0.3-137" date="1723204800">- fix CVE-2024-41946</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 3.0.3-138" date="1725019200">- license compliance rectification</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 3.0.3-139" date="1725278400">- upgrade rexml to fix CVE-2024-39908 CVE-2024-41123 CVE-2024-43398</changelog>
</package>
<package pkgid="a153bb80d80d66607951d03b4947186e728a9d5fb07d27c9337328a911f16986" name="rubygem-actionpack" arch="src">
  <version epoch="1" ver="6.1.4.1" rel="4.oe2203sp1"/>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt;- 6.1.4.1-1" date="1651579200">- Upgrade to 6.1.4.1</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 1:6.1.4.1-2" date="1666267200">- Fix compilation failed</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:6.1.4.1-3" date="1690200000">- Fix CVE-2023-28362</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1:6.1.4.1-4" date="1707134400">- Fix CVE-2023-22792 and CVE-2023-22795</changelog>
</package>
<package pkgid="80ef85bb3fbac893e1d12d3494fb31b1e4f1a79efce53f46ace39c0544e0678f" name="rubygem-actionpack" arch="src">
  <version epoch="1" ver="6.1.4.1" rel="5.oe2203sp1"/>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 1:6.1.4.1-2" date="1666267200">- Fix compilation failed</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:6.1.4.1-3" date="1690200000">- Fix CVE-2023-28362</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1:6.1.4.1-4" date="1707134400">- Fix CVE-2023-22792 and CVE-2023-22795</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1:6.1.4.1-5" date="1717675200">- Fix CVE-2024-28103</changelog>
</package>
<package pkgid="c7d7a6f892c504d3ccecc3c4c1128a3a4bd3c1adb544f09b92f62cc1d2da8d54" name="rubygem-actionpack" arch="src">
  <version epoch="1" ver="6.1.4.1" rel="6.oe2203sp1"/>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 1:6.1.4.1-2" date="1666267200">- Fix compilation failed</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:6.1.4.1-3" date="1690200000">- Fix CVE-2023-28362</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1:6.1.4.1-4" date="1707134400">- Fix CVE-2023-22792 and CVE-2023-22795</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1:6.1.4.1-5" date="1717675200">- Fix CVE-2024-28103</changelog>
  <changelog author="zouzhimin &lt;zouzhimin@kylinos.cn&gt; - 1:6.1.4.1-6" date="1719316800">- Type:CVES
- ID:CVE-2022-23633
- SUG:NA
- DESC:fix CVE-2022-23633</changelog>
</package>
<package pkgid="f292fb1de8656c1597968ba2f45f7081c1569ce1abf8a504cbdf347fdde5e0bd" name="rubygem-actionview" arch="src">
  <version epoch="0" ver="6.1.4.1" rel="2.oe2203sp1"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 6.1.4.1-2" date="1719316800">- Fix CVE-2023-23913</changelog>
</package>
<package pkgid="c647651659ea3cbd598f36ca0977df0245d13bb6de8dc2c7c68825e10693be60" name="rubygem-activerecord" arch="src">
  <version epoch="1" ver="6.1.4.1" rel="2.oe2203sp1"/>
  <changelog author="jiangxinyu &lt;jiangxinyu@kylinos.cn&gt; - 6.1.4.1-1" date="1646222400">- update to 6.1.4.1</changelog>
  <changelog author="wushaozheng &lt;wushaozheng@ncti-gba.cn&gt; - 1:6.1.4.1-2" date="1677067200">- fix CVE-2022-44566</changelog>
</package>
<package pkgid="7d630636e51794240b17cc052ffb3d445c6f0816bb0865a8b0b7009dbc716949" name="rubygem-activestorage" arch="src">
  <version epoch="0" ver="6.1.4.1" rel="2.oe2203sp1"/>
  <changelog author="jiangxinyu &lt;jiangxinyu@kylinos.cn&gt; - 6.1.4.1-1" date="1646222400">- update to 6.1.4.1</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 6.1.4.1-2" date="1709121600">- Fix CVE-2024-26144</changelog>
</package>
<package pkgid="b986ccc1121eb42175e9ffc9180d5ef1da4e065160d430714e013e0667cf3076" name="rubygem-activesupport" arch="src">
  <version epoch="1" ver="6.1.4.1" rel="3.oe2203sp1"/>
  <changelog author="jiangxinyu &lt;jiangxinyu@kylinos.cn&gt; - 6.1.4.1-1" date="1646222400">- update to 6.1.4.1</changelog>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt; - 6.1.4.1-2" date="1657022400">- Add support dalli 3.2.2</changelog>
  <changelog author="wushaozheng &lt;wushaozheng@ncti-gba.cn&gt; - 1:6.1.4.1-3" date="1676980800">- fix CVE-2023-22796</changelog>
</package>
<package pkgid="132f839b6cc52f6d7aa98527af2f10f604c23f1adb00aafa41f63d9cd3177929" name="rubygem-activesupport" arch="src">
  <version epoch="1" ver="6.1.4.1" rel="6.oe2203sp1"/>
  <changelog author="jiangxinyu &lt;jiangxinyu@kylinos.cn&gt; - 6.1.4.1-1" date="1646222400">- update to 6.1.4.1</changelog>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt; - 6.1.4.1-2" date="1657022400">- Add support dalli 3.2.2</changelog>
  <changelog author="wushaozheng &lt;wushaozheng@ncti-gba.cn&gt; - 1:6.1.4.1-3" date="1676980800">- fix CVE-2023-22796</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 1:6.1.4.1-4" date="1678363200">- Fix the self-compilation problem</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 1:6.1.4.1-5" date="1678449600">- Rectify the failure to start memcached as the root user</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:6.1.4.1-6" date="1694433600">- Fix CVE-2023-38037</changelog>
</package>
<package pkgid="3a658a3898deedd154d86317ae52b7e4f8d286717bd8c8bda395999486a48e43" name="rubygem-activesupport" arch="src">
  <version epoch="1" ver="6.1.4.1" rel="8.oe2203sp1"/>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt; - 6.1.4.1-2" date="1657022400">- Add support dalli 3.2.2</changelog>
  <changelog author="wushaozheng &lt;wushaozheng@ncti-gba.cn&gt; - 1:6.1.4.1-3" date="1676980800">- fix CVE-2023-22796</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 1:6.1.4.1-4" date="1678363200">- Fix the self-compilation problem</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 1:6.1.4.1-5" date="1678449600">- Rectify the failure to start memcached as the root user</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:6.1.4.1-6" date="1694433600">- Fix CVE-2023-38037</changelog>
  <changelog author="zouzhimin &lt;zouzhimin@kylinos.cn&gt; - 1:6.1.4.1-7" date="1719316800">- Type:CVES
- ID:CVE-2022-23633
- SUG:NA
- DESC:fix CVE-2022-23633</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:6.1.4.1-8" date="1719403200">- Fix CVE-2023-28120</changelog>
</package>
<package pkgid="4c2cfd6c66b8f4a0fea1539d7e1aa024aca0fb1f28683892e8a1d6601a189643" name="rubygem-globalid" arch="src">
  <version epoch="0" ver="0.4.2" rel="4.oe2203sp1"/>
  <changelog author="liyanan &lt;liyanan32@huawei.com&gt; - 0.4.2-3" date="1628769600">- fix spec file name</changelog>
  <changelog author="liyuxiang&lt;liyuxiang@ncti-gba.cn&gt; - 0.4.2-4" date="1675771200">- fix CVE-2023-22799</changelog>
</package>
<package pkgid="cf9dd2144a08b24fac0e0fc9a88e8f7da00b05adddbb9f87c3c38704e50c63e3" name="rubygem-puma" arch="src">
  <version epoch="0" ver="5.5.2" rel="2.oe2203sp1"/>
  <changelog author="cadongxia &lt;caodongxia@h-partners.com&gt; - 5.5.2-1" date="1667304000">- Upgrade to 5.5.2</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 5.5.2-2" date="1702987200">- Fix CVE-2022-23634</changelog>
</package>
<package pkgid="0c30fa072b0f5dec7d41a5d1567198c33ac8f8f2b2e14e1f9f651c4f5d1f8985" name="rubygem-rack" arch="src">
  <version epoch="1" ver="2.2.3.1" rel="4.oe2203sp1"/>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 1:2.2.3.1-2" date="1720008000">- Fix CVE-2024-39316</changelog>
  <changelog author="zouzhimin &lt;zouzhimin@kylinos.cn&gt; - 1:2.2.3.1-3" date="1720180800">- Type:CVES
- ID:CVE-2024-26141 CVE-2024-26146 CVE-2024-25126
- SUG:NA
- DESC:CVE-2024-26141 CVE-2024-26146 CVE-2024-25126</changelog>
  <changelog author="zouzhimin &lt;zouzhimin@kylinos.cn&gt; - 1:2.2.3.1-4" date="1720180801">- Type:CVES
- ID:CVE-2022-44570 CVE-2022-44571 CVE-2022-44572
- SUG:NA
- DESC:CVE-2022-44570 CVE-2022-44571 CVE-2022-44572</changelog>
</package>
<package pkgid="eef1f3ad9ce60cee2f447d8fd4db11161fc874976c29245dd1ab9cfb6613a2c9" name="rubygem-railties" arch="src">
  <version epoch="0" ver="6.1.4.1" rel="2.oe2203sp1"/>
  <changelog author="jiangxinyu &lt;jiangxinyu@kylinos.cn&gt; - 6.1.4.1-1" date="1646395200">- update to 6.1.4.1</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 6.1.4.1-2" date="1694433600">- Fix CVE-2023-38037</changelog>
</package>
<package pkgid="9d3c689026bd5186a91a8cf86cdc2c37bfd723e828db16477ce8fb6d6c70ce12" name="rubygem-sdoc" arch="src">
  <version epoch="0" ver="2.6.1" rel="1.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 2.4.0-1" date="1657022400">- Upgrade to 2.4.0</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2.6.1-1" date="1685620800">- Upgrade to 2.6.1 for fix sdoc --webcvs fail</changelog>
</package>
<package pkgid="ef0966664a62f60ff59b9edaa46ef007ba0fe28c3194ccb8f456aa4ef8101514" name="rubygem-yard" arch="src">
  <version epoch="0" ver="0.9.26" rel="3.oe2203sp1"/>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 0.9.26-3" date="1709208000">- Fix CVE-2024-27285</changelog>
</package>
<package pkgid="763564ffc9d0f39487c3d51801150fb59622b77d3e69ab7403d2e215ea4a803e" name="rust" arch="src">
  <version epoch="0" ver="1.60.0" rel="3.oe2203sp1"/>
  <changelog author="yangxiaojuan &lt;yangxiaojuan@loongson.cn&gt; - 1.57.0-2" date="1664193600">- Add loongarch64 support</changelog>
  <changelog author="wangkai &lt;wangkai@h-partners.com&gt; - 1.60.0-1" date="1680609600">- Update to 1.60.0</changelog>
  <changelog author="yangxiaojuan &lt;yangxiaojuan@loongson.cn&gt; - 1.60.0-2" date="1681214400">- Add loongarch64 support</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.60.0-3" date="1708171200">- Fix CVE-2024-24577</changelog>
</package>
<package pkgid="2c77121816b07b050123a3b6f4b1f919e29734252e03ae873374a98da27acbdf" name="rust" arch="src">
  <version epoch="0" ver="1.60.0" rel="4.oe2203sp1"/>
  <changelog author="yangxiaojuan &lt;yangxiaojuan@loongson.cn&gt; - 1.57.0-2" date="1664193600">- Add loongarch64 support</changelog>
  <changelog author="wangkai &lt;wangkai@h-partners.com&gt; - 1.60.0-1" date="1680609600">- Update to 1.60.0</changelog>
  <changelog author="yangxiaojuan &lt;yangxiaojuan@loongson.cn&gt; - 1.60.0-2" date="1681214400">- Add loongarch64 support</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.60.0-3" date="1708171200">- Fix CVE-2024-24577</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.60.0-4" date="1719489600">- Fix CVE-2022-36113,  CVE-2022-36114</changelog>
</package>
<package pkgid="f49006e39fe1985e826eeb520c0c33ce624af2b9c5137bbcf2bda85b7b34a647" name="samba" arch="src">
  <version epoch="0" ver="4.17.2" rel="5.oe2203sp1"/>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.15.3-8" date="1660305600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add ldb require version</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 4.15.3-9" date="1661515200">- Type:cves
- ID:CVE-2022-32743
- SUG:NA
- DESC:fix CVE-2022-32743</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 4.15.3-10" date="1661947200">- Type:cves
- ID:CVE-2022-1615
- SUG:NA
- DESC:fix CVE-2022-1615</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.15.3-11" date="1664452800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:clear the compilation alarms</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.15.3-12" date="1666785600">- Type:cves
- ID:CVE-2022-3437
- SUG:NA
- DESC:fix CVE-2022-3437</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.2-1" date="1667908800">- Type:enhancement
- ID:NA
- SUG:NA
- DESC: update to 4.17.2</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 4.17.2-2" date="1669032000">- Type:cves
- ID:CVE-2022-42898
- SUG:NA
- DESC:fix CVE-2022-42898</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.2-3" date="1670500800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:remove runpath of samba's binary files</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.2-4" date="1671278400">- Type:cves
- ID:CVE-2022-44640
- SUG:NA
- DESC:fix CVE-2022-44640</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.2-5" date="1672315200">- Type:cves
- ID:CVE-2022-38023 CVE-2022-37966 CVE-2022-37967
- SUG:NA
- DESC:fix CVE-2022-38023 CVE-2022-37966 CVE-2022-37967</changelog>
</package>
<package pkgid="0d5a872f7c7da06e89848eeb77dc8edac9772e8ee84440583384d05016704b40" name="samba" arch="src">
  <version epoch="0" ver="4.17.5" rel="10.oe2203sp1"/>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 4.17.5-1" date="1677240000">- Type:requirement
- ID:NA
- SUG:NA
- DESC:update samba to 4.17.5-1</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 4.17.5-2" date="1677499200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete useless file</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.5-3" date="1680782400">- Type:cves
- ID:CVE-2023-0225 CVE-2023-0614 CVE-2023-0922
- SUG:NA
- DESC:fix CVE-2023-0225 CVE-2023-0614 CVE-2023-0922</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 4.17.5-4" date="1681214400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:split samba-client-libs and samba-dc-libs</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 4.17.5-5" date="1687348800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add Obsoletes '&lt; version' and Provides '= version' in spec</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.5-6" date="1689854400">- Type:cves
- ID:CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968
- SUG:NA
- DESC:fix CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 4.17.5-7" date="1691755200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:add loongarch64 and sw_64 support</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.5-8" date="1697112000">- Type:cves
- ID:CVE-2023-3961 CVE-2023-4091 CVE-2023-4154 CVE-2023-42669 CVE-2023-42670
- SUG:NA
- DESC:fix CVE-2023-3961 CVE-2023-4091 CVE-2023-4154 CVE-2023-42669 CVE-2023-42670</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.5-9" date="1703764800">- Type:cves
- ID:CVE-2018-14628
- SUG:NA
- DESC:fix CVE-2018-14628</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.5-10" date="1705406400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:remove sensitive info</changelog>
</package>
<package pkgid="d90cd1d879eb1c037d1ea39238abbc9d4cbaf179afe331200d6e75777a6f639d" name="samba" arch="src">
  <version epoch="0" ver="4.17.5" rel="11.oe2203sp1"/>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 4.17.5-2" date="1677499200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete useless file</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.5-3" date="1680782400">- Type:cves
- ID:CVE-2023-0225 CVE-2023-0614 CVE-2023-0922
- SUG:NA
- DESC:fix CVE-2023-0225 CVE-2023-0614 CVE-2023-0922</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 4.17.5-4" date="1681214400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:split samba-client-libs and samba-dc-libs</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 4.17.5-5" date="1687348800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add Obsoletes '&lt; version' and Provides '= version' in spec</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.5-6" date="1689854400">- Type:cves
- ID:CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968
- SUG:NA
- DESC:fix CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 4.17.5-7" date="1691755200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:add loongarch64 and sw_64 support</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.5-8" date="1697112000">- Type:cves
- ID:CVE-2023-3961 CVE-2023-4091 CVE-2023-4154 CVE-2023-42669 CVE-2023-42670
- SUG:NA
- DESC:fix CVE-2023-3961 CVE-2023-4091 CVE-2023-4154 CVE-2023-42669 CVE-2023-42670</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.5-9" date="1703764800">- Type:cves
- ID:CVE-2018-14628
- SUG:NA
- DESC:fix CVE-2018-14628</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.5-10" date="1705406400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:remove sensitive info</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.5-11" date="1705665600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:speeds up the creation of source rpm</changelog>
</package>
<package pkgid="a8f423d202b9ba3c6fffa7f3b46431cb44c11f7f71abd0f206d0883fb40c9bea" name="samba" arch="src">
  <version epoch="0" ver="4.17.5" rel="2.oe2203sp1"/>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.15.3-11" date="1664452800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:clear the compilation alarms</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.15.3-12" date="1666785600">- Type:cves
- ID:CVE-2022-3437
- SUG:NA
- DESC:fix CVE-2022-3437</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.2-1" date="1667908800">- Type:enhancement
- ID:NA
- SUG:NA
- DESC: update to 4.17.2</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 4.17.2-2" date="1669032000">- Type:cves
- ID:CVE-2022-42898
- SUG:NA
- DESC:fix CVE-2022-42898</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.2-3" date="1670500800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:remove runpath of samba's binary files</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.2-4" date="1671278400">- Type:cves
- ID:CVE-2022-44640
- SUG:NA
- DESC:fix CVE-2022-44640</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.2-5" date="1672315200">- Type:cves
- ID:CVE-2022-38023 CVE-2022-37966 CVE-2022-37967
- SUG:NA
- DESC:fix CVE-2022-38023 CVE-2022-37966 CVE-2022-37967</changelog>
  <changelog author="laokz &lt;zhangkai@iscas.ac.cn&gt; - 4.17.2-6" date="1675857600">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:isolate unsupported gold for riscv64</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 4.17.5-1" date="1677240000">- Type:requirement
- ID:NA
- SUG:NA
- DESC:update samba to 4.17.5-1</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 4.17.5-2" date="1677499200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete useless file</changelog>
</package>
<package pkgid="f587b7ed9028590362786e17b5205aaf97ca30ee310b0236cb3d60706100864a" name="samba" arch="src">
  <version epoch="0" ver="4.17.5" rel="4.oe2203sp1"/>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.2-1" date="1667908800">- Type:enhancement
- ID:NA
- SUG:NA
- DESC: update to 4.17.2</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 4.17.2-2" date="1669032000">- Type:cves
- ID:CVE-2022-42898
- SUG:NA
- DESC:fix CVE-2022-42898</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.2-3" date="1670500800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:remove runpath of samba's binary files</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.2-4" date="1671278400">- Type:cves
- ID:CVE-2022-44640
- SUG:NA
- DESC:fix CVE-2022-44640</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.2-5" date="1672315200">- Type:cves
- ID:CVE-2022-38023 CVE-2022-37966 CVE-2022-37967
- SUG:NA
- DESC:fix CVE-2022-38023 CVE-2022-37966 CVE-2022-37967</changelog>
  <changelog author="laokz &lt;zhangkai@iscas.ac.cn&gt; - 4.17.2-6" date="1675857600">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:isolate unsupported gold for riscv64</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 4.17.5-1" date="1677240000">- Type:requirement
- ID:NA
- SUG:NA
- DESC:update samba to 4.17.5-1</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 4.17.5-2" date="1677499200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete useless file</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.5-3" date="1680782400">- Type:cves
- ID:CVE-2023-0225 CVE-2023-0614 CVE-2023-0922
- SUG:NA
- DESC:fix CVE-2023-0225 CVE-2023-0614 CVE-2023-0922</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 4.17.5-4" date="1681214400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:split samba-client-libs and samba-dc-libs</changelog>
</package>
<package pkgid="1be2a3ba1ea616b349c54a058b7a9e3d7c8eb3219f15e99a0348d17a1018a990" name="samba" arch="src">
  <version epoch="0" ver="4.17.5" rel="6.oe2203sp1"/>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.2-3" date="1670500800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:remove runpath of samba's binary files</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.2-4" date="1671278400">- Type:cves
- ID:CVE-2022-44640
- SUG:NA
- DESC:fix CVE-2022-44640</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.2-5" date="1672315200">- Type:cves
- ID:CVE-2022-38023 CVE-2022-37966 CVE-2022-37967
- SUG:NA
- DESC:fix CVE-2022-38023 CVE-2022-37966 CVE-2022-37967</changelog>
  <changelog author="laokz &lt;zhangkai@iscas.ac.cn&gt; - 4.17.2-6" date="1675857600">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:isolate unsupported gold for riscv64</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 4.17.5-1" date="1677240000">- Type:requirement
- ID:NA
- SUG:NA
- DESC:update samba to 4.17.5-1</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 4.17.5-2" date="1677499200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete useless file</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.5-3" date="1680782400">- Type:cves
- ID:CVE-2023-0225 CVE-2023-0614 CVE-2023-0922
- SUG:NA
- DESC:fix CVE-2023-0225 CVE-2023-0614 CVE-2023-0922</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 4.17.5-4" date="1681214400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:split samba-client-libs and samba-dc-libs</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 4.17.5-5" date="1687348800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add Obsoletes '&lt; version' and Provides '= version' in spec</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.5-6" date="1689854400">- Type:cves
- ID:CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968
- SUG:NA
- DESC:fix CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968</changelog>
</package>
<package pkgid="ec1759694a535b940984fa76e09325ca6894d4da9ab80016966fd27c2fd4dad3" name="samba" arch="src">
  <version epoch="0" ver="4.17.5" rel="8.oe2203sp1"/>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.2-5" date="1672315200">- Type:cves
- ID:CVE-2022-38023 CVE-2022-37966 CVE-2022-37967
- SUG:NA
- DESC:fix CVE-2022-38023 CVE-2022-37966 CVE-2022-37967</changelog>
  <changelog author="laokz &lt;zhangkai@iscas.ac.cn&gt; - 4.17.2-6" date="1675857600">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:isolate unsupported gold for riscv64</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 4.17.5-1" date="1677240000">- Type:requirement
- ID:NA
- SUG:NA
- DESC:update samba to 4.17.5-1</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 4.17.5-2" date="1677499200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete useless file</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.5-3" date="1680782400">- Type:cves
- ID:CVE-2023-0225 CVE-2023-0614 CVE-2023-0922
- SUG:NA
- DESC:fix CVE-2023-0225 CVE-2023-0614 CVE-2023-0922</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 4.17.5-4" date="1681214400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:split samba-client-libs and samba-dc-libs</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 4.17.5-5" date="1687348800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add Obsoletes '&lt; version' and Provides '= version' in spec</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.5-6" date="1689854400">- Type:cves
- ID:CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968
- SUG:NA
- DESC:fix CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 4.17.5-7" date="1691755200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:add loongarch64 and sw_64 support</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.5-8" date="1697112000">- Type:cves
- ID:CVE-2023-3961 CVE-2023-4091 CVE-2023-4154 CVE-2023-42669 CVE-2023-42670
- SUG:NA
- DESC:fix CVE-2023-3961 CVE-2023-4091 CVE-2023-4154 CVE-2023-42669 CVE-2023-42670</changelog>
</package>
<package pkgid="8ee67ae759027dcc1f843e57bde061740329ac1e11d0cd3b8e1617147cbba013" name="sane-backends" arch="src">
  <version epoch="0" ver="1.0.28" rel="12.oe2203sp1"/>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1.0.28-12" date="1715342400">- Fix CVE-2023-46047 and CVE-2023-46052</changelog>
</package>
<package pkgid="3433dd0187351cf4326650b52792ab5f42680155802b67fbfc5c917b6cb0fae6" name="scipy" arch="src">
  <version epoch="0" ver="1.6.2" rel="2.oe2203sp1"/>
  <changelog author="sunguoshuai &lt;sunguoshuai@huawei.com&gt; - 1.2.2-5" date="1627819200">- Fix build error with gcc 10</changelog>
  <changelog author="chenyanpanHW &lt;chenyanpan@huawei.com&gt; - 1.2.2-6" date="1627905600">- DESC: delete -Sgit from 
%setup       -q



/usr/bin/cat /home/lkp/rpmbuild/SOURCES/backport-BUG-fix-a-minor-refcounting-issue-in-Py_FindObjects.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/backport-BUG-fix-small-refcount-issue-in-ndimage._ctest.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

, and delete BuildRequires git</changelog>
  <changelog author="zhangtao &lt;zhangtao221@huawei.com&gt; - 1.2.2-7" date="1630756800">- Strip Dynamic library</changelog>
  <changelog author="chenchen &lt;chen_aka_jan@163.com&gt; - 1.2.2-8" date="1631793600">- del rpath for some binaries and bin</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@huawei.com&gt; - 1.6.2-1" date="1640347200">- upgrade to 1.6.2</changelog>
  <changelog author="Wenyu Liu &lt;liuwenyu7@huawei.com&gt; - 1.6.2-2" date="1689249600">- Fix CVE-2023-25399</changelog>
</package>
<package pkgid="44b5d2655c1a7ec9844a9e5ecc40db81d6e59bd3d24789dfc4439ddca20204e6" name="screen" arch="src">
  <version epoch="1" ver="4.9.0" rel="2.oe2203sp1"/>
  <changelog author="panxiaohe &lt;panxiaohe@huawei.com&gt; - 1:4.8.0-10" date="1622808000">- add systemd to BuildRequires to use _tmpfilesdir macro
- fix bogus dates in changelog</changelog>
  <changelog author="panxiaohe &lt;panxiaohe@huawei.com&gt; - 1:4.8.0-11" date="1624104000">- remove '--enable-telnet' in configure</changelog>
  <changelog author="hongjinghao &lt;hongjinghao@huawei.com&gt; - 1:4.9.0-1" date="1666353600">- update to 4.9.0</changelog>
  <changelog author="hongjinghao &lt;hongjinghao@huawei.com&gt; - 1:4.9.0-2" date="1681905600">- fix CVE-2023-24626</changelog>
</package>
<package pkgid="9a8b29c03061e97eaa731b6b008c85a7a7868614b4963305ea7b573fdd1bf5e0" name="scrub" arch="src">
  <version epoch="0" ver="2.6.1" rel="3.oe2203sp1"/>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.6.1-3" date="1706616000">- Fix exit with status code 0 for --help</changelog>
</package>
<package pkgid="ea148f5f41e37ca218457bd4c07f4945dffe9d905af9f7256435219c051834fd" name="scsi-target-utils" arch="src">
  <version epoch="0" ver="1.0.79" rel="6.oe2203sp1"/>
  <changelog author="Qiang Wei &lt;qiang.wei@suse.com&gt; - 1.0.79-5" date="1670587200">- Make Ceph rbd, rdma, glusterfs support optional</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1.0.79-6" date="1725883200">- Fix CVE-2024-45751</changelog>
</package>
<package pkgid="ec73dcfdb5b4a0dd17eedd6f7b1855968d5b864c7765850ff4773e0c221765b6" name="selinux-policy" arch="src">
  <version epoch="0" ver="35.5" rel="18.oe2203sp1"/>
  <changelog author="lujie &lt;lujie54@huawei.com&gt; - 35.5-9" date="1663070400">- backport upstream patches</changelog>
  <changelog author="lujie &lt;lujie54@huawei.com&gt; - 35.5-10" date="1663070401">- backport upstream patches</changelog>
  <changelog author="lujie &lt;lujie54@huawei.com&gt; - 35.5-11" date="1663070402">- backport upstream patches</changelog>
  <changelog author="lujie &lt;lujie54@huawei.com&gt; - 35.5-12" date="1663243200">- backport upstream patches</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 35.5-13" date="1663588800">- allow map postfix_master_t</changelog>
  <changelog author="lujie &lt;lujie54@huawei.com&gt; - 35.5-14" date="1669550400">- backport upstream patches</changelog>
  <changelog author="Ge Wang &lt;wangge20@huawei.com&gt; - 35.5-15" date="1670846400">- add var_lib_t for obs-server</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 35.5-16" date="1679572800">- backport patch Allow virt_domain read device sysctls
                 Allow icecast rename its log files</changelog>
  <changelog author="jinlun &lt;jinlun@huawei.com&gt; - 35.5-17" date="1686657600">- backport upstream patches.</changelog>
  <changelog author="jinlun &lt;jinlun@huawei.com&gt; - 35.5-18" date="1688558400">- allow init_t create fifo file in net_conf dir.</changelog>
</package>
<package pkgid="a109a03150e8baf2351c9c74d780e6c0d3fe86e70b4de07091be8bacbb84f7d6" name="selinux-policy" arch="src">
  <version epoch="0" ver="35.5" rel="19.oe2203sp1"/>
  <changelog author="lujie &lt;lujie54@huawei.com&gt; - 35.5-10" date="1663070400">- backport upstream patches</changelog>
  <changelog author="lujie &lt;lujie54@huawei.com&gt; - 35.5-11" date="1663070401">- backport upstream patches</changelog>
  <changelog author="lujie &lt;lujie54@huawei.com&gt; - 35.5-12" date="1663243200">- backport upstream patches</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 35.5-13" date="1663588800">- allow map postfix_master_t</changelog>
  <changelog author="lujie &lt;lujie54@huawei.com&gt; - 35.5-14" date="1669550400">- backport upstream patches</changelog>
  <changelog author="Ge Wang &lt;wangge20@huawei.com&gt; - 35.5-15" date="1670846400">- add var_lib_t for obs-server</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 35.5-16" date="1679572800">- backport patch Allow virt_domain read device sysctls
                 Allow icecast rename its log files</changelog>
  <changelog author="jinlun &lt;jinlun@huawei.com&gt; - 35.5-17" date="1686657600">- backport upstream patches.</changelog>
  <changelog author="jinlun &lt;jinlun@huawei.com&gt; - 35.5-18" date="1688558400">- allow init_t create fifo file in net_conf dir.</changelog>
  <changelog author="jinlun &lt;jinlun@huawei.com&gt; - 35.5-19" date="1692360000">- backport upstream patches.</changelog>
</package>
<package pkgid="4f04d1d1531a65c3b92701353541b7662fb0902d422b541e022193bfec50cd42" name="selinux-policy" arch="src">
  <version epoch="0" ver="35.5" rel="21.oe2203sp1"/>
  <changelog author="lujie &lt;lujie54@huawei.com&gt; - 35.5-12" date="1663243200">- backport upstream patches</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 35.5-13" date="1663588800">- allow map postfix_master_t</changelog>
  <changelog author="lujie &lt;lujie54@huawei.com&gt; - 35.5-14" date="1669550400">- backport upstream patches</changelog>
  <changelog author="Ge Wang &lt;wangge20@huawei.com&gt; - 35.5-15" date="1670846400">- add var_lib_t for obs-server</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 35.5-16" date="1679572800">- backport patch Allow virt_domain read device sysctls
                 Allow icecast rename its log files</changelog>
  <changelog author="jinlun &lt;jinlun@huawei.com&gt; - 35.5-17" date="1686657600">- backport upstream patches.</changelog>
  <changelog author="jinlun &lt;jinlun@huawei.com&gt; - 35.5-18" date="1688558400">- allow init_t create fifo file in net_conf dir.</changelog>
  <changelog author="jinlun &lt;jinlun@huawei.com&gt; - 35.5-19" date="1692360000">- backport upstream patches.</changelog>
  <changelog author="jinlun &lt;jinlun@huawei.com&gt; - 35.5-20" date="1703073600">- add rules for hostnamed to rpmScript dbus chat</changelog>
  <changelog author="jinlun &lt;jinlun@huawei.com&gt; - 35.5-21" date="1710936000">- fix semodule_package fail</changelog>
</package>
<package pkgid="0816f60a3eb29167cd03e5d4312bbc867f1f57d3aadb0368996d61282fa9a836" name="sendmail" arch="src">
  <version epoch="0" ver="8.17.1" rel="8.oe2203sp1"/>
  <changelog author="yanglu&lt;yanglu72@h-partners.com&gt; - 8.17.1-5" date="1665576000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: fix newaliases command error and postfix service start execption after sendmail install</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 8.17.1-6" date="1670932800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: fix sendmail.pem unsafe</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 8.17.1-7" date="1678449600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: modify certificate validity period</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 8.17.1-8" date="1716379200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix config changes</changelog>
</package>
<package pkgid="2d15a9ab58694bc4752543f21c7688e86ac5ac635a72020e20b57e779aab7d1a" name="shadow" arch="src">
  <version epoch="2" ver="4.9" rel="13.oe2203sp1"/>
  <changelog author="panxiaohe&lt;panxiaohe@h-partners.com&gt; - 2:4.9-4" date="1645185600">- useradd: modify check ID range for system users</changelog>
  <changelog author="gaoyusong&lt;gaoyusong2@huawei.com&gt; - 2:4.9-5" date="1667044800">- backport some patches</changelog>
  <changelog author="fushanqing &lt;fushanqing@kylinos.cn&gt; - 2:4.9-6" date="1667217600">- remove patch 'shadow-4.1.5.1-var-lock.patch' and 'shadow-utils-fix-lock-file-residue.patch'</changelog>
  <changelog author="ExtinctFire &lt;shenyining_00@126.com&gt; - 2:4.9-7" date="1671278400">- chpasswd fix function problem with R parameter</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2:4.9-8" date="1679572800">- backport patches from upstream</changelog>
  <changelog author="wangyunjia &lt;yunjia.wang@huawei.com&gt; - 2:4.9-9" date="1681992000">- fix CVE-2023-29383</changelog>
  <changelog author="wangyunjia &lt;yunjia.wang@huawei.com&gt; - 2:4.9-10" date="1687176000">- backport patches from upstream</changelog>
  <changelog author="xiongshenglan&lt;xiongshenglan@huawei.com&gt; - 2:4.9-11" date="1692100800">- Remove encrypted passwd for useradd-groupadd-groupmod-usermod</changelog>
  <changelog author="wangyunjia &lt;yunjia.wang@huawei.com&gt; - 2:4.9-12" date="1692705600">- backport patches from upstream</changelog>
  <changelog author="wangyunjia &lt;yunjia.wang@huawei.com&gt; - 2:4.9-13" date="1695211200">- backport some patches</changelog>
</package>
<package pkgid="30e81fcf78f2d9551f7ab25f2fe1c796d6d149a7eb7216450deb10036cfc0da2" name="shadow" arch="src">
  <version epoch="2" ver="4.9" rel="14.oe2203sp1"/>
  <changelog author="gaoyusong&lt;gaoyusong2@huawei.com&gt; - 2:4.9-5" date="1667044800">- backport some patches</changelog>
  <changelog author="fushanqing &lt;fushanqing@kylinos.cn&gt; - 2:4.9-6" date="1667217600">- remove patch 'shadow-4.1.5.1-var-lock.patch' and 'shadow-utils-fix-lock-file-residue.patch'</changelog>
  <changelog author="ExtinctFire &lt;shenyining_00@126.com&gt; - 2:4.9-7" date="1671278400">- chpasswd fix function problem with R parameter</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2:4.9-8" date="1679572800">- backport patches from upstream</changelog>
  <changelog author="wangyunjia &lt;yunjia.wang@huawei.com&gt; - 2:4.9-9" date="1681992000">- fix CVE-2023-29383</changelog>
  <changelog author="wangyunjia &lt;yunjia.wang@huawei.com&gt; - 2:4.9-10" date="1687176000">- backport patches from upstream</changelog>
  <changelog author="xiongshenglan&lt;xiongshenglan@huawei.com&gt; - 2:4.9-11" date="1692100800">- Remove encrypted passwd for useradd-groupadd-groupmod-usermod</changelog>
  <changelog author="wangyunjia &lt;yunjia.wang@huawei.com&gt; - 2:4.9-12" date="1692705600">- backport patches from upstream</changelog>
  <changelog author="wangyunjia &lt;yunjia.wang@huawei.com&gt; - 2:4.9-13" date="1695211200">- backport some patches</changelog>
  <changelog author="wangqingsan &lt;wangqingsan@huawei.com&gt; - 2:4.9-14" date="1699531200">- backport some patches</changelog>
</package>
<package pkgid="d382df826d9935ad0e32b227edf569eb04aea4288ae5a6ae2db53d0ce6669036" name="shadow" arch="src">
  <version epoch="2" ver="4.9" rel="9.oe2203sp1"/>
  <changelog author="steven Y.Gui &lt;steven_ygui@163.com&gt; - 2:4.8.1-7" date="1633003200">- backport some patches to fix memory leak</changelog>
  <changelog author="panxiaohe&lt;panxiaohe@huawei.com&gt; - 2:4.9-1" date="1640088000">- update to 4.9</changelog>
  <changelog author="wangcheng&lt;wangcheng156@huawei.com&gt; - 2:4.9-2" date="1640865600">- add sm3 support</changelog>
  <changelog author="panxiaohe&lt;panxiaohe@huawei.com&gt; - 2:4.9-3" date="1644235200">- synchronized login.defs with upstream file</changelog>
  <changelog author="panxiaohe&lt;panxiaohe@h-partners.com&gt; - 2:4.9-4" date="1645185600">- useradd: modify check ID range for system users</changelog>
  <changelog author="gaoyusong&lt;gaoyusong2@huawei.com&gt; - 2:4.9-5" date="1667044800">- backport some patches</changelog>
  <changelog author="fushanqing &lt;fushanqing@kylinos.cn&gt; - 2:4.9-6" date="1667217600">- remove patch 'shadow-4.1.5.1-var-lock.patch' and 'shadow-utils-fix-lock-file-residue.patch'</changelog>
  <changelog author="ExtinctFire &lt;shenyining_00@126.com&gt; - 2:4.9-7" date="1671278400">- chpasswd fix function problem with R parameter</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2:4.9-8" date="1679572800">- backport patches from upstream</changelog>
  <changelog author="wangyunjia &lt;yunjia.wang@huawei.com&gt; - 2:4.9-9" date="1681992000">- fix CVE-2023-29383</changelog>
</package>
<package pkgid="1d2477fe9ce7a81a94140ddc686be24102ad42f291c671291a6b69f66ef39519" name="shim" arch="src">
  <version epoch="0" ver="15.6" rel="12.oe2203sp1"/>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 15.6-3" date="1667908800">- Optimize patches for SMx feature</changelog>
  <changelog author="jinlun &lt;jinlun@huawei.com&gt; - 15.6-4" date="1668081600">- Add BuildRequires on the arrch64</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 15.6-5" date="1668168000">- Bugfix for SMx feature</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 15.6-6" date="1668168001">- Bugfix for SM2 certificate chain verify</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 15.6-7" date="1668772800">- Add some switch for easy to use</changelog>
  <changelog author="jinlun &lt;jinlun@huawei.com&gt; - 15.6-8" date="1670932800">- add edition number</changelog>
  <changelog author="jinlun &lt;jinlun@huawei.com&gt; - 15.6-9" date="1676376000">- fix CVE-2023-0286 and add code check</changelog>
  <changelog author="jinlun &lt;jinlun@huawei.com&gt; - 15.6-10" date="1689249600">- fix CVE-2018-0737 , CVE-2021-23840</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 15.6-11" date="1698494400">- fix CVE-2023-0464 CVE-2023-3817</changelog>
  <changelog author="jinlun &lt;jinlun@huawei.com&gt; - 15.6-12" date="1699358400">- fix CVE-2023-40546</changelog>
</package>
<package pkgid="c783e79882b8384faafa6beb2426b0bd9a788c6ab88045ab03cebf1ce14d0979" name="shim" arch="src">
  <version epoch="0" ver="15.6" rel="16.oe2203sp1"/>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 15.6-7" date="1668772800">- Add some switch for easy to use</changelog>
  <changelog author="jinlun &lt;jinlun@huawei.com&gt; - 15.6-8" date="1670932800">- add edition number</changelog>
  <changelog author="jinlun &lt;jinlun@huawei.com&gt; - 15.6-9" date="1676376000">- fix CVE-2023-0286 and add code check</changelog>
  <changelog author="jinlun &lt;jinlun@huawei.com&gt; - 15.6-10" date="1689249600">- fix CVE-2018-0737 , CVE-2021-23840</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 15.6-11" date="1698494400">- fix CVE-2023-0464 CVE-2023-3817</changelog>
  <changelog author="jinlun &lt;jinlun@huawei.com&gt; - 15.6-12" date="1699358400">- fix CVE-2023-40546</changelog>
  <changelog author="ExtinctFire &lt;shenyining_00@126.com&gt; - 15.6-13" date="1702900800">- backport patches from upstream</changelog>
  <changelog author="zhangruifang &lt;zhangruifang@h-partners.com&gt; - 15.6-14" date="1703505600">- backport patchs from upstream</changelog>
  <changelog author="jinlun &lt;jinlun@huawei.com&gt; -15.6-15" date="1704888000">- add tpcm support with ipmi channel</changelog>
  <changelog author="jinlun &lt;jinlun@huawei.com&gt; - 15.6-16" date="1706356800">- fix CVE-2023-40547 CVE-2023-40548 CVE-2023-40549 CVE-2023-40550
- CVE-2023-40551</changelog>
</package>
<package pkgid="ae9a815ec2f4e227df3dce315281a6efa93d44b6f3518d1a53bfab423ac74777" name="shim" arch="src">
  <version epoch="0" ver="15.6" rel="17.oe2203sp1"/>
  <changelog author="jinlun &lt;jinlun@huawei.com&gt; - 15.6-8" date="1670932800">- add edition number</changelog>
  <changelog author="jinlun &lt;jinlun@huawei.com&gt; - 15.6-9" date="1676376000">- fix CVE-2023-0286 and add code check</changelog>
  <changelog author="jinlun &lt;jinlun@huawei.com&gt; - 15.6-10" date="1689249600">- fix CVE-2018-0737 , CVE-2021-23840</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 15.6-11" date="1698494400">- fix CVE-2023-0464 CVE-2023-3817</changelog>
  <changelog author="jinlun &lt;jinlun@huawei.com&gt; - 15.6-12" date="1699358400">- fix CVE-2023-40546</changelog>
  <changelog author="ExtinctFire &lt;shenyining_00@126.com&gt; - 15.6-13" date="1702900800">- backport patches from upstream</changelog>
  <changelog author="zhangruifang &lt;zhangruifang@h-partners.com&gt; - 15.6-14" date="1703505600">- backport patchs from upstream</changelog>
  <changelog author="jinlun &lt;jinlun@huawei.com&gt; -15.6-15" date="1704888000">- add tpcm support with ipmi channel</changelog>
  <changelog author="jinlun &lt;jinlun@huawei.com&gt; - 15.6-16" date="1706356800">- fix CVE-2023-40547 CVE-2023-40548 CVE-2023-40549 CVE-2023-40550
- CVE-2023-40551</changelog>
  <changelog author="zhengxiaoxiao &lt;zhengxiaoxiao2@huawei.com&gt; - 15.6-17" date="1709121600">- fix CVE-2023-3446 CVE-2023-0465 CVE-2023-2650 CVE-2024-0727</changelog>
</package>
<package pkgid="f509d50bdd1dc0408c76f3c19f02307676ace64dfa1e587702e749f1bf8d16d5" name="shim" arch="src">
  <version epoch="0" ver="15.6" rel="20.oe2203sp1"/>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 15.6-11" date="1698494400">- fix CVE-2023-0464 CVE-2023-3817</changelog>
  <changelog author="jinlun &lt;jinlun@huawei.com&gt; - 15.6-12" date="1699358400">- fix CVE-2023-40546</changelog>
  <changelog author="ExtinctFire &lt;shenyining_00@126.com&gt; - 15.6-13" date="1702900800">- backport patches from upstream</changelog>
  <changelog author="zhangruifang &lt;zhangruifang@h-partners.com&gt; - 15.6-14" date="1703505600">- backport patchs from upstream</changelog>
  <changelog author="jinlun &lt;jinlun@huawei.com&gt; -15.6-15" date="1704888000">- add tpcm support with ipmi channel</changelog>
  <changelog author="jinlun &lt;jinlun@huawei.com&gt; - 15.6-16" date="1706356800">- fix CVE-2023-40547 CVE-2023-40548 CVE-2023-40549 CVE-2023-40550
- CVE-2023-40551</changelog>
  <changelog author="zhengxiaoxiao &lt;zhengxiaoxiao2@huawei.com&gt; - 15.6-17" date="1709121600">- fix CVE-2023-3446 CVE-2023-0465 CVE-2023-2650 CVE-2024-0727</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 15.6-18" date="1711368000">- backport patch from upstream</changelog>
  <changelog author="lijuzhang &lt;lijuzhang@inspur.com&gt; - 15.6-19" date="1713787200">- replace vendor for BOOTX64.CSV or BOOTAA64.CSV</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 15.6-20" date="1715083200">- fix the TPCM feature issue</changelog>
</package>
<package pkgid="8f8b42c2a585f84d49733bd31f75562f1e5c00f88fba95f616d1e243da3d7f33" name="shim" arch="src">
  <version epoch="0" ver="15.6" rel="9.oe2203sp1"/>
  <changelog author="jinlun &lt;jinlun@huawei.com&gt; - 15.4-5" date="1663675200">- fix CVE-2017-3735 CVE-2017-3737 CVE-2018-0732 CVE-2018-0737
  CVE-2018-0739 CVE-2019-1563 CVE-2020-1971 CVE-2021-23840
  CVE-2021-23841 CVE-2022-0778 CVE-2021-3712</changelog>
  <changelog author="jinlun &lt;jinlun@huawei.com&gt; - 15.6-1" date="1667217600">- update version to 15.6</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 15.6-2" date="1667217601">- Feature: shim support SM2 and SM3</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 15.6-3" date="1667908800">- Optimize patches for SMx feature</changelog>
  <changelog author="jinlun &lt;jinlun@huawei.com&gt; - 15.6-4" date="1668081600">- Add BuildRequires on the arrch64</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 15.6-5" date="1668168000">- Bugfix for SMx feature</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 15.6-6" date="1668168001">- Bugfix for SM2 certificate chain verify</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 15.6-7" date="1668772800">- Add some switch for easy to use</changelog>
  <changelog author="jinlun &lt;jinlun@huawei.com&gt; - 15.6-8" date="1670932800">- add edition number</changelog>
  <changelog author="jinlun &lt;jinlun@huawei.com&gt; - 15.6-9" date="1676376000">- fix CVE-2023-0286 and add code check</changelog>
</package>
<package pkgid="38c781d4498bbbdf3fb9aa8f830d1a792ea4539618fde32244aa9c0d67b2c4c3" name="skopeo" arch="src">
  <version epoch="1" ver="1.5.2" rel="3.oe2203sp1"/>
  <changelog author="haozi007&lt;liuhao27@huawei.com&gt; - 1.1.0-7.dev.git63085f5" date="1637841600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:install registries.conf for skopeo</changelog>
  <changelog author="haozi007&lt;liuhao27@huawei.com&gt; - 1.1.0-7.dev.git63085f5" date="1638187200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:udpate skopeo to 1.5.2</changelog>
  <changelog author="fushanqing &lt;fushanqing@kylinos.cn&gt; - 1:1.8.0-1" date="1667822400">- update to 1.8.0</changelog>
  <changelog author="fushanqing &lt;fushanqing@kylinos.cn&gt; - 1:1.5.2-1" date="1671710400">- rollback to 1.5.2</changelog>
  <changelog author="yeqinglong &lt;yeqinglong@kylinsec.com.cn&gt; - 1:1.5.2-2" date="1691755200">- add loongarch64 and sw_64 support</changelog>
  <changelog author="lijian&lt;lijian2@kylinos.cn&gt; - 1:1.5.2-3" date="1694692800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:rebuild for golang cvefix: CVE-2023-24534,CVE-2023-24536,CVE-2023-24537,CVE-2023-24538</changelog>
</package>
<package pkgid="efb67f1bc5776d2ac03fc2b2abb56fe5b8b9720b3e9cfd21e06563aa617a1149" name="skopeo" arch="src">
  <version epoch="1" ver="1.5.2" rel="7.oe2203sp1"/>
  <changelog author="fushanqing &lt;fushanqing@kylinos.cn&gt; - 1:1.8.0-1" date="1667822400">- update to 1.8.0</changelog>
  <changelog author="fushanqing &lt;fushanqing@kylinos.cn&gt; - 1:1.5.2-1" date="1671710400">- rollback to 1.5.2</changelog>
  <changelog author="yeqinglong &lt;yeqinglong@kylinsec.com.cn&gt; - 1:1.5.2-2" date="1691755200">- add loongarch64 and sw_64 support</changelog>
  <changelog author="lijian&lt;lijian2@kylinos.cn&gt; - 1:1.5.2-3" date="1694692800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:rebuild for golang cvefix: CVE-2023-24534,CVE-2023-24536,CVE-2023-24537,CVE-2023-24538</changelog>
  <changelog author="liukuo&lt;liukuo@kylinos.cn&gt; - 1:1.5.2-4" date="1708516800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:rebuild for golang cvefix: CVE-2022-41723,CVE-2023-29406,CVE-2023-39326</changelog>
  <changelog author="lijian &lt;lijian2@kylinos.cn&gt; -1:1.5.2-5" date="1715428800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: fix CVE-2022-41723</changelog>
  <changelog author="lijian &lt;lijian2@kylinos.cn&gt; - 1:1.5.2-6" date="1715428801">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: fix CVE-2024-28180</changelog>
  <changelog author="lijian &lt;lijian2@kylinos.cn&gt; - 1:1.5.2-7" date="1715428802">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: fix CVE-2023-29406</changelog>
</package>
<package pkgid="871e87b7bf99dce71625b1d29e8873306a907c749d9b5b829dab914879265bcc" name="snakeyaml" arch="src">
  <version epoch="0" ver="1.32" rel="1.oe2203sp1"/>
  <changelog author="xu_ping &lt;xuping33@h-partners.com&gt; - 1.17-9" date="1667995200">- change source pac</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1.32-1" date="1678363200">- Update to 1.32 for fix CVE-2022-41854,CVE-2022-25857 and CVE-2022-38749-to-CVE-2022-38752</changelog>
</package>
<package pkgid="d66599f88d29442c0a57a9e845f04a077ad14ad19c7eb6f037f81ea402e59b03" name="snappy-java" arch="src">
  <version epoch="0" ver="1.1.2.4" rel="2.oe2203sp1"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.1.2.4-2" date="1688385600">- Fix CVE-2023-34455 and CVE-2023-34454</changelog>
</package>
<package pkgid="771ffcf94a8f928f9ee94b62237ef1076cee1e7d54c4866963c6fcb54bb3df1c" name="snappy-java" arch="src">
  <version epoch="0" ver="1.1.2.4" rel="3.oe2203sp1"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.1.2.4-2" date="1688385600">- Fix CVE-2023-34455 and CVE-2023-34454</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.1.2.4-3" date="1695729600">- Fix CVE-2023-43642</changelog>
</package>
<package pkgid="f37d76a171934d56144a434f684c81279947e88fcc4456cfdb264d8c72660cf5" name="sos" arch="src">
  <version epoch="0" ver="4.0" rel="6.oe2203sp1"/>
  <changelog author="GuoCe &lt;guoce@kylinos.cn&gt; - 4.0-6" date="1714996800">- Fix CVE-2022-2806</changelog>
</package>
<package pkgid="516f38bcc900901d256c4b8b1e3a1a46438b5f9c79f4c0a310b7e43fabb908c6" name="sox" arch="src">
  <version epoch="0" ver="14.4.2.0" rel="29.oe2203sp1"/>
  <changelog author="xu_ping &lt;xuping33@h-partners.com&gt; - 14.4.2.0-28" date="1668686400">- Modify --with-distro</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 14.4.2.0-29" date="1701950400">- Fix CVE-2021-33844,CVE-2023-32627,CVE-2021-23159,CVE-2023-34432
- CVE-2023-34318,CVE-2021-23172,CVE-2021-3643,CVE-2021-23210
- CVE-2022-31650,CVE-2023-26590,CVE-2022-31651,CVE-2023-32627
- CVE-2017-18189</changelog>
</package>
<package pkgid="89c84ffb717c5ce413592e1cb0c3413e9104e524e8d20cf438cd082098274ba6" name="sqlite" arch="src">
  <version epoch="0" ver="3.37.2" rel="5.oe2203sp1"/>
  <changelog author="wbq_sky &lt;wangbingquan@huawei.com&gt; - 3.34.0-2" date="1630670400">- fix the infinite loop problem in the trim function while the pattern is well formed.</changelog>
  <changelog author="wbq_sky &lt;wangbingquan@huawei.com&gt; - 3.34.0-3" date="1630670401">- fix the null reference in the tigger statement.</changelog>
  <changelog author="wbq_sky &lt;wangbingquan@huawei.com&gt; - 3.36.0-1" date="1637841600">- update to 3.36.0.</changelog>
  <changelog author="wbq_sky &lt;wangbingquan@huawei.com&gt; - 3.36.0-2" date="1638014400">- fix the CVE-2021-36690.</changelog>
  <changelog author="liusirui &lt;liusirui@huawei.com&gt; - 3.36.0-3" date="1660651200">- fix the CVE-2022-35737.</changelog>
  <changelog author="zhuwentao &lt;zhuwentao5@huawei.com&gt; - 3.37.2-1" date="1661774400">- update to 3.37.2</changelog>
  <changelog author="zhuwentao &lt;zhuwentao5@huawei.com&gt; - 3.37.2-2" date="1662379200">- fix integer overflow on gigabyte string</changelog>
  <changelog author="zhuwentao &lt;zhuwentao5@huawei.com&gt; - 3.37.2-3" date="1663156800">- fix build problem</changelog>
  <changelog author="zhuwentao &lt;zhuwentao5@huawei.com&gt; - 3.37.2-4" date="1671019200">- fix the CVE-2022-46908</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 3.37.2-5" date="1673611200">- remove fail testcase for loongarch</changelog>
</package>
<package pkgid="23b62de5e79d853ce4d960c5def3a1667aeb5b29517b27f00fe7989e11ee87a4" name="sqlite" arch="src">
  <version epoch="0" ver="3.37.2" rel="6.oe2203sp1"/>
  <changelog author="wbq_sky &lt;wangbingquan@huawei.com&gt; - 3.34.0-3" date="1630670400">- fix the null reference in the tigger statement.</changelog>
  <changelog author="wbq_sky &lt;wangbingquan@huawei.com&gt; - 3.36.0-1" date="1637841600">- update to 3.36.0.</changelog>
  <changelog author="wbq_sky &lt;wangbingquan@huawei.com&gt; - 3.36.0-2" date="1638014400">- fix the CVE-2021-36690.</changelog>
  <changelog author="liusirui &lt;liusirui@huawei.com&gt; - 3.36.0-3" date="1660651200">- fix the CVE-2022-35737.</changelog>
  <changelog author="zhuwentao &lt;zhuwentao5@huawei.com&gt; - 3.37.2-1" date="1661774400">- update to 3.37.2</changelog>
  <changelog author="zhuwentao &lt;zhuwentao5@huawei.com&gt; - 3.37.2-2" date="1662379200">- fix integer overflow on gigabyte string</changelog>
  <changelog author="zhuwentao &lt;zhuwentao5@huawei.com&gt; - 3.37.2-3" date="1663156800">- fix build problem</changelog>
  <changelog author="zhuwentao &lt;zhuwentao5@huawei.com&gt; - 3.37.2-4" date="1671019200">- fix the CVE-2022-46908</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 3.37.2-5" date="1673611200">- remove fail testcase for loongarch</changelog>
  <changelog author="zhuwentao &lt;zhuwentao5@huawei.com&gt; - 3.37.2-6" date="1691409600">- fix the CVE-2023-36191</changelog>
</package>
<package pkgid="be7617ba44bd053bf24ce468b22f7084845b5cafe62f526ec283b6063d6789c6" name="sqlite" arch="src">
  <version epoch="0" ver="3.37.2" rel="7.oe2203sp1"/>
  <changelog author="liusirui &lt;liusirui@huawei.com&gt; - 3.36.0-3" date="1660651200">- fix the CVE-2022-35737.</changelog>
  <changelog author="zhuwentao &lt;zhuwentao5@huawei.com&gt; - 3.37.2-1" date="1661774400">- update to 3.37.2</changelog>
  <changelog author="zhuwentao &lt;zhuwentao5@huawei.com&gt; - 3.37.2-2" date="1662379200">- fix integer overflow on gigabyte string</changelog>
  <changelog author="zhuwentao &lt;zhuwentao5@huawei.com&gt; - 3.37.2-3" date="1663156800">- fix build problem</changelog>
  <changelog author="zhuwentao &lt;zhuwentao5@huawei.com&gt; - 3.37.2-4" date="1671019200">- fix the CVE-2022-46908</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 3.37.2-5" date="1673611200">- remove fail testcase for loongarch</changelog>
  <changelog author="zhuwentao &lt;zhuwentao5@huawei.com&gt; - 3.37.2-6" date="1691409600">- fix the CVE-2023-36191</changelog>
  <changelog author="mazhao &lt;mazhao12@huawei.com&gt; - 3.37.2-7" date="1704283200">- fix the CVE-2023-7104</changelog>
</package>
<package pkgid="511332ff0ca04ce532390216a9492b7d7c54c0a630a3815117b1fe146718f8c6" name="sqlite-jdbc" arch="src">
  <version epoch="0" ver="3.15.1" rel="2.oe2203sp1"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.15.1-2" date="1699272000">- Fix CVE-2023-32697</changelog>
</package>
<package pkgid="6c190f40ce0569cc79d2b82d5865008487f041d85959dda636a84cf615db51aa" name="squid" arch="src">
  <version epoch="7" ver="4.9" rel="18.oe2203sp1"/>
  <changelog author="xihaochen &lt;xihaochen@h-partner.com&gt; - 4.9-12" date="1645617600">- Type:requirement
- ID:NA
- SUG:NA
- DESC:use libtdb instead of libdb</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 4.9-13" date="1650283200">- Type:cves
- ID:CVE-2021-28116
- SUG:NA
- DESC:fix CVE-2021-28116</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 4.9-14" date="1656331200">- Type:cves
- ID:CVE-2021-46784
- SUG:NA
- DESC:fix CVE-2021-46784</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7:4.9-15" date="1664020800">- Type:cves
- ID:CVE-2022-41317
- SUG:NA
- DESC:fix CVE-2022-41317</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7:4.9-16" date="1664280000">- Type:cves
- ID:CVE-2022-41318
- SUG:NA
- DESC:fix CVE-2022-41318</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 7:4.9-17" date="1668168000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix build failed</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 7:4.9-18" date="1698753600">- Type:cves
- ID:CVE-2023-46846 CVE-2023-46847
- SUG:NA
- DESC:fix CVE-2023-46846 CVE-2023-46847</changelog>
</package>
<package pkgid="37999b53197070c0f9135afec654e99c11a31887d7c2896819c6c250a85d89ee" name="squid" arch="src">
  <version epoch="7" ver="4.9" rel="20.oe2203sp1"/>
  <changelog author="xihaochen &lt;xihaochen@h-partner.com&gt; - 4.9-12" date="1645617600">- Type:requirement
- ID:NA
- SUG:NA
- DESC:use libtdb instead of libdb</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 4.9-13" date="1650283200">- Type:cves
- ID:CVE-2021-28116
- SUG:NA
- DESC:fix CVE-2021-28116</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 4.9-14" date="1656331200">- Type:cves
- ID:CVE-2021-46784
- SUG:NA
- DESC:fix CVE-2021-46784</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7:4.9-15" date="1664020800">- Type:cves
- ID:CVE-2022-41317
- SUG:NA
- DESC:fix CVE-2022-41317</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7:4.9-16" date="1664280000">- Type:cves
- ID:CVE-2022-41318
- SUG:NA
- DESC:fix CVE-2022-41318</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 7:4.9-17" date="1668168000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix build failed</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 7:4.9-18" date="1698753600">- Type:cves
- ID:CVE-2023-46846 CVE-2023-46847
- SUG:NA
- DESC:fix CVE-2023-46846 CVE-2023-46847</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 7:4.9-19" date="1698926400">- Type:CVE
- ID:CVE-2023-46724
- SUG:NA
- DESC:fix CVE-2023-46724</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 7:4.9-20" date="1699444800">- Type:CVE
- ID:CVE-2023-46728
- SUG:NA
- DESC:fix CVE-2023-46728</changelog>
</package>
<package pkgid="e74442be2b749073601755e3970f70ff8336230794bd6d0c8f04e2040cc1364f" name="squid" arch="src">
  <version epoch="7" ver="4.9" rel="21.oe2203sp1"/>
  <changelog author="xihaochen &lt;xihaochen@h-partner.com&gt; - 4.9-12" date="1645617600">- Type:requirement
- ID:NA
- SUG:NA
- DESC:use libtdb instead of libdb</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 4.9-13" date="1650283200">- Type:cves
- ID:CVE-2021-28116
- SUG:NA
- DESC:fix CVE-2021-28116</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 4.9-14" date="1656331200">- Type:cves
- ID:CVE-2021-46784
- SUG:NA
- DESC:fix CVE-2021-46784</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7:4.9-15" date="1664020800">- Type:cves
- ID:CVE-2022-41317
- SUG:NA
- DESC:fix CVE-2022-41317</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7:4.9-16" date="1664280000">- Type:cves
- ID:CVE-2022-41318
- SUG:NA
- DESC:fix CVE-2022-41318</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 7:4.9-17" date="1668168000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix build failed</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 7:4.9-18" date="1698753600">- Type:cves
- ID:CVE-2023-46846 CVE-2023-46847
- SUG:NA
- DESC:fix CVE-2023-46846 CVE-2023-46847</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 7:4.9-19" date="1698926400">- Type:CVE
- ID:CVE-2023-46724
- SUG:NA
- DESC:fix CVE-2023-46724</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 7:4.9-20" date="1699444800">- Type:CVE
- ID:CVE-2023-46728
- SUG:NA
- DESC:fix CVE-2023-46728</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 7:4.9-21" date="1701777600">- Type:cves
- ID:CVE-2023-49285 CVE-2023-49286
- SUG:NA
- DESC:fix CVE-2023-49285 CVE-2023-49286</changelog>
</package>
<package pkgid="77accf49a0c72406a0d17bde49a8e1980b7e4e5523d1aa36d1530319c9bd38ab" name="squid" arch="src">
  <version epoch="7" ver="4.9" rel="22.oe2203sp1"/>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 4.9-13" date="1650283200">- Type:cves
- ID:CVE-2021-28116
- SUG:NA
- DESC:fix CVE-2021-28116</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 4.9-14" date="1656331200">- Type:cves
- ID:CVE-2021-46784
- SUG:NA
- DESC:fix CVE-2021-46784</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7:4.9-15" date="1664020800">- Type:cves
- ID:CVE-2022-41317
- SUG:NA
- DESC:fix CVE-2022-41317</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7:4.9-16" date="1664280000">- Type:cves
- ID:CVE-2022-41318
- SUG:NA
- DESC:fix CVE-2022-41318</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 7:4.9-17" date="1668168000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix build failed</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 7:4.9-18" date="1698753600">- Type:cves
- ID:CVE-2023-46846 CVE-2023-46847
- SUG:NA
- DESC:fix CVE-2023-46846 CVE-2023-46847</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 7:4.9-19" date="1698926400">- Type:CVE
- ID:CVE-2023-46724
- SUG:NA
- DESC:fix CVE-2023-46724</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 7:4.9-20" date="1699444800">- Type:CVE
- ID:CVE-2023-46728
- SUG:NA
- DESC:fix CVE-2023-46728</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 7:4.9-21" date="1701777600">- Type:cves
- ID:CVE-2023-49285 CVE-2023-49286
- SUG:NA
- DESC:fix CVE-2023-49285 CVE-2023-49286</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 7:4.9-22" date="1702641600">- Type:cves
- ID:CVE-2023-50269
- SUG:NA
- DESC:fix CVE-2023-50269</changelog>
</package>
<package pkgid="f70b51021d9c9cd27d1b52c32fe80d66ef42c1d22f6b681d14e4028606e4c38b" name="squid" arch="src">
  <version epoch="7" ver="4.9" rel="23.oe2203sp1"/>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 4.9-14" date="1656331200">- Type:cves
- ID:CVE-2021-46784
- SUG:NA
- DESC:fix CVE-2021-46784</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7:4.9-15" date="1664020800">- Type:cves
- ID:CVE-2022-41317
- SUG:NA
- DESC:fix CVE-2022-41317</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7:4.9-16" date="1664280000">- Type:cves
- ID:CVE-2022-41318
- SUG:NA
- DESC:fix CVE-2022-41318</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 7:4.9-17" date="1668168000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix build failed</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 7:4.9-18" date="1698753600">- Type:cves
- ID:CVE-2023-46846 CVE-2023-46847
- SUG:NA
- DESC:fix CVE-2023-46846 CVE-2023-46847</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 7:4.9-19" date="1698926400">- Type:CVE
- ID:CVE-2023-46724
- SUG:NA
- DESC:fix CVE-2023-46724</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 7:4.9-20" date="1699444800">- Type:CVE
- ID:CVE-2023-46728
- SUG:NA
- DESC:fix CVE-2023-46728</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 7:4.9-21" date="1701777600">- Type:cves
- ID:CVE-2023-49285 CVE-2023-49286
- SUG:NA
- DESC:fix CVE-2023-49285 CVE-2023-49286</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 7:4.9-22" date="1702641600">- Type:cves
- ID:CVE-2023-50269
- SUG:NA
- DESC:fix CVE-2023-50269</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 7:4.9-23" date="1706184000">- Type:cves
- ID:CVE-2024-23638
- SUG:NA
- DESC:fix CVE-2024-23638</changelog>
</package>
<package pkgid="ff10f8f0323a65f33d121c8ed9c776b2752c3c1a5351917e68c6907e650a982d" name="squid" arch="src">
  <version epoch="7" ver="4.9" rel="24.oe2203sp1"/>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7:4.9-15" date="1664020800">- Type:cves
- ID:CVE-2022-41317
- SUG:NA
- DESC:fix CVE-2022-41317</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7:4.9-16" date="1664280000">- Type:cves
- ID:CVE-2022-41318
- SUG:NA
- DESC:fix CVE-2022-41318</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 7:4.9-17" date="1668168000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix build failed</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 7:4.9-18" date="1698753600">- Type:cves
- ID:CVE-2023-46846 CVE-2023-46847
- SUG:NA
- DESC:fix CVE-2023-46846 CVE-2023-46847</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 7:4.9-19" date="1698926400">- Type:CVE
- ID:CVE-2023-46724
- SUG:NA
- DESC:fix CVE-2023-46724</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 7:4.9-20" date="1699444800">- Type:CVE
- ID:CVE-2023-46728
- SUG:NA
- DESC:fix CVE-2023-46728</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 7:4.9-21" date="1701777600">- Type:cves
- ID:CVE-2023-49285 CVE-2023-49286
- SUG:NA
- DESC:fix CVE-2023-49285 CVE-2023-49286</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 7:4.9-22" date="1702641600">- Type:cves
- ID:CVE-2023-50269
- SUG:NA
- DESC:fix CVE-2023-50269</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 7:4.9-23" date="1706184000">- Type:cves
- ID:CVE-2024-23638
- SUG:NA
- DESC:fix CVE-2024-23638</changelog>
  <changelog author="hehuazhen &lt;hehuazhen@huawei.com&gt; - 7:4.9-24" date="1708344000">- Type:cves
- ID:CVE-2024-25617
- SUG:NA
- DESC:fix CVE-2024-25617</changelog>
</package>
<package pkgid="39c2fc943d560ff8de9a3411acdffb872fe4047a261d7105324bc3fd36ffe036" name="squid" arch="src">
  <version epoch="7" ver="4.9" rel="25.oe2203sp1"/>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7:4.9-16" date="1664280000">- Type:cves
- ID:CVE-2022-41318
- SUG:NA
- DESC:fix CVE-2022-41318</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 7:4.9-17" date="1668168000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix build failed</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 7:4.9-18" date="1698753600">- Type:cves
- ID:CVE-2023-46846 CVE-2023-46847
- SUG:NA
- DESC:fix CVE-2023-46846 CVE-2023-46847</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 7:4.9-19" date="1698926400">- Type:CVE
- ID:CVE-2023-46724
- SUG:NA
- DESC:fix CVE-2023-46724</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 7:4.9-20" date="1699444800">- Type:CVE
- ID:CVE-2023-46728
- SUG:NA
- DESC:fix CVE-2023-46728</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 7:4.9-21" date="1701777600">- Type:cves
- ID:CVE-2023-49285 CVE-2023-49286
- SUG:NA
- DESC:fix CVE-2023-49285 CVE-2023-49286</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 7:4.9-22" date="1702641600">- Type:cves
- ID:CVE-2023-50269
- SUG:NA
- DESC:fix CVE-2023-50269</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 7:4.9-23" date="1706184000">- Type:cves
- ID:CVE-2024-23638
- SUG:NA
- DESC:fix CVE-2024-23638</changelog>
  <changelog author="hehuazhen &lt;hehuazhen@huawei.com&gt; - 7:4.9-24" date="1708344000">- Type:cves
- ID:CVE-2024-25617
- SUG:NA
- DESC:fix CVE-2024-25617</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 7:4.9-25" date="1719489600">- Type:cves
- ID:CVE-2024-37894
- SUG:NA
- DESC:fix CVE-2024-37894</changelog>
</package>
<package pkgid="97b448156706df978a801b003c679f678fe5236a7ebb3fdc68fc1fc31a4f3a0c" name="squid" arch="src">
  <version epoch="7" ver="4.9" rel="26.oe2203sp1"/>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 7:4.9-17" date="1668168000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix build failed</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 7:4.9-18" date="1698753600">- Type:cves
- ID:CVE-2023-46846 CVE-2023-46847
- SUG:NA
- DESC:fix CVE-2023-46846 CVE-2023-46847</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 7:4.9-19" date="1698926400">- Type:CVE
- ID:CVE-2023-46724
- SUG:NA
- DESC:fix CVE-2023-46724</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 7:4.9-20" date="1699444800">- Type:CVE
- ID:CVE-2023-46728
- SUG:NA
- DESC:fix CVE-2023-46728</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 7:4.9-21" date="1701777600">- Type:cves
- ID:CVE-2023-49285 CVE-2023-49286
- SUG:NA
- DESC:fix CVE-2023-49285 CVE-2023-49286</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 7:4.9-22" date="1702641600">- Type:cves
- ID:CVE-2023-50269
- SUG:NA
- DESC:fix CVE-2023-50269</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 7:4.9-23" date="1706184000">- Type:cves
- ID:CVE-2024-23638
- SUG:NA
- DESC:fix CVE-2024-23638</changelog>
  <changelog author="hehuazhen &lt;hehuazhen@huawei.com&gt; - 7:4.9-24" date="1708344000">- Type:cves
- ID:CVE-2024-25617
- SUG:NA
- DESC:fix CVE-2024-25617</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 7:4.9-25" date="1719489600">- Type:cves
- ID:CVE-2024-37894
- SUG:NA
- DESC:fix CVE-2024-37894</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 7:4.9-26" date="1726747200">- Type:cves
- ID:CVE-2024-25111
- SUG:NA
- DESC:fix CVE-2024-25111</changelog>
</package>
<package pkgid="55ff1e880dedc268812a25e35602d8767c8aff878c3dc1a69ae2184816c367fc" name="sssd" arch="src">
  <version epoch="0" ver="2.6.1" rel="12.oe2203sp1"/>
  <changelog author="zhujianwei001 &lt;zhujianwei7@huawei.com&gt; - 2.6.1-3" date="1664193600">- delete broken link</changelog>
  <changelog author="zhouchenchen &lt;zhouchenchen@huawei.com&gt; - 2.6.1-4" date="1669118400">- delete duplicate file sssd-example.conf</changelog>
  <changelog author="zhouchenchen &lt;zhouchenchen@huawei.com&gt; - 2.6.1-5" date="1671537600">- fix cwe-394</changelog>
  <changelog author="zhouchenchen&lt;zhouchenchen@huawei.com&gt; - 2.6.1-6" date="1671624000">- backport some patch</changelog>
  <changelog author="zhouchenchen&lt;zhouchenchen@huawei.com&gt; - 2.6.1-7" date="1671624001">- backport some patch</changelog>
  <changelog author="huangzq6 &lt;huangzhenqiang2@huawei.com&gt; -2.6.1-8" date="1671883200">- fix coredump during ifp reconnect</changelog>
  <changelog author="yixiangzhike&lt;yixiangzhike007@163.com&gt; - 2.6.1-9" date="1679572800">- backport upstream patch</changelog>
  <changelog author="xuraoqing&lt;xuraoqing@huawei.com&gt; - 2.6.1-10" date="1690977600">- backport upstream patch</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.6.1-11" date="1695384000">- backport upstream patches</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 2.6.1-12" date="1701172800">- backport upstream patches</changelog>
</package>
<package pkgid="56f4e5db41914c61a5bc0956b063d080a233f94c370d325ed4a6e0cdd80bf9be" name="sssd" arch="src">
  <version epoch="0" ver="2.6.1" rel="13.oe2203sp1"/>
  <changelog author="zhouchenchen &lt;zhouchenchen@huawei.com&gt; - 2.6.1-4" date="1669118400">- delete duplicate file sssd-example.conf</changelog>
  <changelog author="zhouchenchen &lt;zhouchenchen@huawei.com&gt; - 2.6.1-5" date="1671537600">- fix cwe-394</changelog>
  <changelog author="zhouchenchen&lt;zhouchenchen@huawei.com&gt; - 2.6.1-6" date="1671624000">- backport some patch</changelog>
  <changelog author="zhouchenchen&lt;zhouchenchen@huawei.com&gt; - 2.6.1-7" date="1671624001">- backport some patch</changelog>
  <changelog author="huangzq6 &lt;huangzhenqiang2@huawei.com&gt; -2.6.1-8" date="1671883200">- fix coredump during ifp reconnect</changelog>
  <changelog author="yixiangzhike&lt;yixiangzhike007@163.com&gt; - 2.6.1-9" date="1679572800">- backport upstream patch</changelog>
  <changelog author="xuraoqing&lt;xuraoqing@huawei.com&gt; - 2.6.1-10" date="1690977600">- backport upstream patch</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.6.1-11" date="1695384000">- backport upstream patches</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 2.6.1-12" date="1701172800">- backport upstream patches</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 2.6.1-13" date="1708603200">- backport upstream patches</changelog>
</package>
<package pkgid="e63b7cbd62382ad2de9cfe52cd4a16b8581932c935202d19ef6ff0814866cf50" name="sssd" arch="src">
  <version epoch="0" ver="2.6.1" rel="14.oe2203sp1"/>
  <changelog author="zhouchenchen &lt;zhouchenchen@huawei.com&gt; - 2.6.1-5" date="1671537600">- fix cwe-394</changelog>
  <changelog author="zhouchenchen&lt;zhouchenchen@huawei.com&gt; - 2.6.1-6" date="1671624000">- backport some patch</changelog>
  <changelog author="zhouchenchen&lt;zhouchenchen@huawei.com&gt; - 2.6.1-7" date="1671624001">- backport some patch</changelog>
  <changelog author="huangzq6 &lt;huangzhenqiang2@huawei.com&gt; -2.6.1-8" date="1671883200">- fix coredump during ifp reconnect</changelog>
  <changelog author="yixiangzhike&lt;yixiangzhike007@163.com&gt; - 2.6.1-9" date="1679572800">- backport upstream patch</changelog>
  <changelog author="xuraoqing&lt;xuraoqing@huawei.com&gt; - 2.6.1-10" date="1690977600">- backport upstream patch</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.6.1-11" date="1695384000">- backport upstream patches</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 2.6.1-12" date="1701172800">- backport upstream patches</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 2.6.1-13" date="1708603200">- backport upstream patches</changelog>
  <changelog author="liweigang &lt;liweiganga@uniontech.com&gt; - 2.6.1-14" date="1713528000">- fix CVE-2023-3758</changelog>
</package>
<package pkgid="50835baf5a8d708891b6907d05e21a120bc50e236869f3e2ce78c1effa54ffc9" name="stratovirt" arch="src">
  <version epoch="0" ver="2.1.0" rel="9.oe2203sp1"/>
  <changelog author="Jie Yang &lt;yangjieyj.yang@huawei.com&gt; - 2.0.0-6" date="1630324800">- docs: fix some statement
- machine_manager: add autodeflate for balloon
- migration: add dev_id into VirtioPciState when save and restore device state
- machine: fix more than one pcie-root-ports with same id
- migration: move function "transport_reset" to save state stage for vhost vsock device
- vfio: adding ram device region to vfio bar region
- machine_manager: move argument "serial" from -drive to -device virtio-blk-pci/device
- machine_manager: add multifunction for devices
- machine: add init_multifunction function to init multifunction
- machine: add realization for multifunction</changelog>
  <changelog author="Jie Yang &lt;yangjieyj.yang@huawei.com&gt; - 2.1.0-1" date="1644580800">- Add support for PCIe native hotplugging.
- Reduce memory consumption of reading edk2 firmware files on aarch64.
- Add support for booting from disk image directly.
- Add support for VM reboot and VM shutdown.
- Add support for guest memory preallocation.
- Add more test cases.
- Add and fix documentation.
- Replace lazy_static crate with once_cell.
- Performance enhancement for virtio-blk and virtio-net devices.
- Add ftrace support.</changelog>
  <changelog author="Jie Yang &lt;yangjieyj.yang@huawei.com&gt; - 2.1.0-2" date="1645185600">- Fix VFIO hotplugging failure caused by missing seccomp rules.
- Fix booting failure from disk image on x86_64.
- Update some documents.</changelog>
  <changelog author="Jie Yang &lt;yangjieyj.yang@huawei.com&gt; - 2.1.0-3" date="1646136000">- Fix memory snapshot failure with hotplugged devices.
- Fix address translation for virtio devices.
- Add some test cases for microvm.
- Update some documents.</changelog>
  <changelog author="Jie Yang &lt;yangjieyj.yang@huawei.com&gt; - 2.1.0-4" date="1647172800">- Some bug fixes.
- Eliminate build warnings and clippy errors with Rust 1.57.0.
- Update docs.</changelog>
  <changelog author="zhouli57 &lt;zhouli57@huawei.com&gt; - 2.1.0-5" date="1647432000">- Clear some warnings.</changelog>
  <changelog author="yezengruan &lt;yezengruan@huawei.com&gt; - 2.1.0-6" date="1665316800">- Unified license name specification</changelog>
  <changelog author="yezengruan &lt;yezengruan@huawei.com&gt; - 2.1.0-7" date="1669291200">- Update stratovirt download url</changelog>
  <changelog author="Xinle.Guo &lt;guoxinle1@huawei.com&gt; - 2.1.0-8" date="1669723200">- Add micro vm seccomp rules</changelog>
  <changelog author="yezengruan &lt;yezengruan@huawei.com&gt; - 2.1.0-9" date="1675857600">- Support parameter -accel</changelog>
</package>
<package pkgid="fa8c58a5cc72ffdc189c29d5a939c67aa455332c070627e98f4ae0db49bebff0" name="strongswan" arch="src">
  <version epoch="0" ver="5.9.7" rel="4.oe2203sp1"/>
  <changelog author="shdluan &lt;shdluan@163.com&gt; - 5.7.2-7" date="1628078400">- fix multiple defination of variable</changelog>
  <changelog author="caodongxia &lt;caodongxia@huawei.com&gt; - 5.7.2-8" date="1630497600">- fix fuzz: use of uninitialized value</changelog>
  <changelog author="caodongxia &lt;caodongxia@huawei.com&gt; - 5.7.2-9" date="1631188800">- fix rpath error</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.7.2-10" date="1635163200">- fix CVE-2021-40990 CVE-2021-40991</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.7.2-11" date="1644321600">- fix CVE-2021-45079</changelog>
  <changelog author="openhosec &lt;openhosec@hosec.net&gt; - 5.9.7-1" date="1660392000">- Upgrade to 5.9.7 version</changelog>
  <changelog author="liyuxiang &lt;liyuxiang@ncti-gba.cn&gt; - 5.9.7-2" date="1667304000">- fix CVE-2022-40617</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.9.7-3" date="1669723200">- Add Requires strongswan-sqlite,strongswan-tnc-imcvs and strongswan-libipsec</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.9.7-4" date="1684497600">- Fix /usr/sbin/ipsec conflicts with libreswan</changelog>
</package>
<package pkgid="4491d0d227e17b4f931619b0fe24be2df72a701a69e5054ac56e795cdaca4be1" name="strongswan" arch="src">
  <version epoch="0" ver="5.9.7" rel="5.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 5.7.2-11" date="1644321600">- fix CVE-2021-45079</changelog>
  <changelog author="openhosec &lt;openhosec@hosec.net&gt; - 5.9.7-1" date="1660392000">- Upgrade to 5.9.7 version</changelog>
  <changelog author="liyuxiang &lt;liyuxiang@ncti-gba.cn&gt; - 5.9.7-2" date="1667304000">- fix CVE-2022-40617</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.9.7-3" date="1669723200">- Add Requires strongswan-sqlite,strongswan-tnc-imcvs and strongswan-libipsec</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.9.7-4" date="1684497600">- Fix /usr/sbin/ipsec conflicts with libreswan</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 5.9.7-5" date="1702555200">- Fix CVE-2023-41913</changelog>
</package>
<package pkgid="f76a4484c8c63b5a11e1dc6a3abc5e41157065d8c8f5a5bd8bf0c518e15a145b" name="sudo" arch="src">
  <version epoch="0" ver="1.9.8p2" rel="10.oe2203sp1"/>
  <changelog author="panxiaohe &lt;panxiaohe@huawei.com&gt; - 1.9.8p2-1" date="1639483200">- Update to 1.9.8p2</changelog>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 1.9.8p2-2" date="1646654400">- remove rpath and runpath of exec files and libraries</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 1.9.8p2-3" date="1662206400">- Fix CVE-2022-37434 and CVE-2022-33070</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 1.9.8p2-4" date="1667649600">- Fix CVE-2022-43995</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 1.9.8p2-5" date="1669204800">- Backport patches from upstream community</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 1.9.8p2-6" date="1669377600">- Backport patches from upstream community</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 1.9.8p2-7" date="1670500800">- Backport patches from upstream community</changelog>
  <changelog author="houmingyong&lt;houmingyong@huawei.com&gt; - 1.9.8p2-8" date="1674129600">- Fix CVE-2023-22809</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 1.9.8p2-9" date="1675252800">- For "sudo ALL" a non-existent command is not an error.</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 1.9.8p2-10" date="1678190400">- Fix CVE-2023-27320.</changelog>
</package>
<package pkgid="26a533f7921fdf44db22e1dcc590fdafc3d39cc7d50095dbbaebeb7e69257baf" name="sudo" arch="src">
  <version epoch="0" ver="1.9.8p2" rel="11.oe2203sp1"/>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 1.9.8p2-2" date="1646654400">- remove rpath and runpath of exec files and libraries</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 1.9.8p2-3" date="1662206400">- Fix CVE-2022-37434 and CVE-2022-33070</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 1.9.8p2-4" date="1667649600">- Fix CVE-2022-43995</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 1.9.8p2-5" date="1669204800">- Backport patches from upstream community</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 1.9.8p2-6" date="1669377600">- Backport patches from upstream community</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 1.9.8p2-7" date="1670500800">- Backport patches from upstream community</changelog>
  <changelog author="houmingyong&lt;houmingyong@huawei.com&gt; - 1.9.8p2-8" date="1674129600">- Fix CVE-2023-22809</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 1.9.8p2-9" date="1675252800">- For "sudo ALL" a non-existent command is not an error.</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 1.9.8p2-10" date="1678190400">- Fix CVE-2023-27320.</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1.9.8p2-11" date="1680004800">- Fix CVE-2023-28486 and CVE-2023-28487</changelog>
</package>
<package pkgid="8c31996b8abb23baabc28e3e97372d41eab1f192506a208880b71b59f5f2aa01" name="sudo" arch="src">
  <version epoch="0" ver="1.9.8p2" rel="15.oe2203sp1"/>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 1.9.8p2-6" date="1669377600">- Backport patches from upstream community</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 1.9.8p2-7" date="1670500800">- Backport patches from upstream community</changelog>
  <changelog author="houmingyong&lt;houmingyong@huawei.com&gt; - 1.9.8p2-8" date="1674129600">- Fix CVE-2023-22809</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 1.9.8p2-9" date="1675252800">- For "sudo ALL" a non-existent command is not an error.</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 1.9.8p2-10" date="1678190400">- Fix CVE-2023-27320.</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1.9.8p2-11" date="1680004800">- Fix CVE-2023-28486 and CVE-2023-28487</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 1.9.8p2-12" date="1681300800">- Fix compilation error on sw64 arch.</changelog>
  <changelog author="zhoushuiqing &lt;zhoushuiqing2@huawei.com&gt; - 1.9.8p2-13" date="1686657600">- Backport patches from upstream community</changelog>
  <changelog author="zhangruifang &lt;zhangruifang1@h-partners.com&gt; - 1.9.8p2-14" date="1701172800">- Backport patches from upstream community</changelog>
  <changelog author="wangqingsan &lt;wangqingsan@huawei.com&gt; - 1.9.8p2-15" date="1704801600">- fix CVE-2023-42465</changelog>
</package>
<package pkgid="35bc547f4c715ebeb8b8306c5277407c85969c3d161982787853ce9da942b75d" name="sudo" arch="src">
  <version epoch="0" ver="1.9.8p2" rel="9.oe2203sp1"/>
  <changelog author="yixiangzhike &lt;zhangxingliang3@huawei.com&gt; - 1.9.5p2-2" date="1631793600">- DESC: treat stack exhaustion like memory allocation failure</changelog>
  <changelog author="panxiaohe &lt;panxiaohe@huawei.com&gt; - 1.9.8p2-1" date="1639483200">- Update to 1.9.8p2</changelog>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 1.9.8p2-2" date="1646654400">- remove rpath and runpath of exec files and libraries</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 1.9.8p2-3" date="1662206400">- Fix CVE-2022-37434 and CVE-2022-33070</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 1.9.8p2-4" date="1667649600">- Fix CVE-2022-43995</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 1.9.8p2-5" date="1669204800">- Backport patches from upstream community</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 1.9.8p2-6" date="1669377600">- Backport patches from upstream community</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 1.9.8p2-7" date="1670500800">- Backport patches from upstream community</changelog>
  <changelog author="houmingyong&lt;houmingyong@huawei.com&gt; - 1.9.8p2-8" date="1674129600">- Fix CVE-2023-22809</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 1.9.8p2-9" date="1675252800">- For "sudo ALL" a non-existent command is not an error.</changelog>
</package>
<package pkgid="03dd558025cc81193d38a90d923876a9a039c1c114e1cf67d293b4875b816b49" name="suitesparse" arch="src">
  <version epoch="0" ver="5.10.1" rel="2.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 5.10.1-1" date="1666785600">- Upgrade to version 5.10.1</changelog>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt;  - 5.10.1-2" date="1669032000">- Change source</changelog>
</package>
<package pkgid="922b942de1ed7d4f949b7bc9cee63c55128e53a64eaeb024ede85195165c092c" name="syslinux" arch="src">
  <version epoch="0" ver="6.04" rel="14.oe2203sp1"/>
  <changelog author="hanhui&lt;hanhui15@huawei.com&gt; - 6.04-8" date="1626436800">- solves the problem of compiling stuck</changelog>
  <changelog author="hanhui&lt;hanhui15@huawei.com&gt; - 6.04-9" date="1627646400">- fix build failed due to gcc-10</changelog>
  <changelog author="yangcheng&lt;yangcheng87@huawei.com&gt; - 6.04-10" date="1628769600">- streamline the build dependency and fix the compiling stuck</changelog>
  <changelog author="yangcheng&lt;yangcheng87@huawei.com&gt; - 6.04-11" date="1629720000">- Increase perl and gcc dependencies in buildrequires</changelog>
  <changelog author="hanhui&lt;hanhui15@h-partners.com&gt; - 6.04-12" date="1650283200">- slove duplicate package files</changelog>
  <changelog author="hanhui&lt;hanhui15@h-partners.com&gt; - 6.04-13" date="1653393600">- package the extlinux* file into the syslinux-extlinux.rpm</changelog>
  <changelog author="zhangpan&lt;zhangpan103@h-partners.com&gt; - 6.04-14" date="1689076800">- fix CVE-2016-9840 CVE-2016-9841 CVE-2016-9842 CVE-2016-9843</changelog>
</package>
<package pkgid="7652b2dee28c2690b09c2037dfb22e16c9f01b3a0a54566ef4f3807eba0107d9" name="syslinux" arch="src">
  <version epoch="0" ver="6.04" rel="16.oe2203sp1"/>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 6.04-14" date="1689076800">- fix CVE-2016-9840 CVE-2016-9841 CVE-2016-9842 CVE-2016-9843</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 6.04-15" date="1722513600">- Clean changelog format, fix yaml</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 6.04-16" date="1724932800">- update libpng 1.6.36 to fix CVE-2011-2501 CVE-2011-2690 CVE-2011-2691
- CVE-2011-2692 CVE-2011-3045 CVE-2011-3048 CVE-2012-3425 CVE-2015-7981
- CVE-2015-8126 CVE-2015-8472 CVE-2015-8540 CVE-2016-10087 CVE-2017-12652</changelog>
</package>
<package pkgid="f4bf88657ee916411027ce3f0eb28530b6484efc853ed61ad84beca7c036abba" name="sysmaster" arch="src">
  <version epoch="0" ver="0.2.4" rel="3.oe2203sp1"/>
  <changelog author="He Xiaowen &lt;hexiaowen@huawei.com&gt; - 0.2.0-1" date="1661169600">- initial package</changelog>
  <changelog author="He Xiaowen &lt;hexiaowen@huawei.com&gt; - 0.2.0-2" date="1661169601">- strip the libraries</changelog>
  <changelog author="licunlong&lt;licunlong1@huawei.com&gt; - 0.2.1-1" date="1663070400">- sync patches from upstream</changelog>
  <changelog author="licunlong&lt;licunlong1@huawei.com&gt; - 0.2.1-2" date="1663675200">- rename process1 to sysmaster, and remove pctrl to /usr/bin</changelog>
  <changelog author="shenyangyang&lt;shenyangyang4@huawei.com&gt; - 0.2.3-1" date="1683374400">- update version to 0.2.3</changelog>
  <changelog author="shenyangyang&lt;shenyangyang4@huawei.com&gt; - 0.2.3-2" date="1685448000">- Support compatible compile with rust 1.60</changelog>
  <changelog author="licunlong&lt;licunlong1@huawei.com&gt; - 0.2.3-3" date="1686916800">- sync patches from upstream</changelog>
  <changelog author="shenyangyang&lt;shenyangyang4@huawei.com&gt; - 0.2.4-1" date="1687262400">- update version to 0.2.4 for docker use</changelog>
  <changelog author="shenyangyang&lt;shenyangyang4@huawei.com&gt; - 0.2.4-2" date="1687867200">- modify the sshd units</changelog>
  <changelog author="xujing&lt;xujing125@huawei.com&gt; - 0.2.4-3" date="1688644800">- fix objcopy permission denied when rpmbuild</changelog>
</package>
<package pkgid="a6082da233dc65b3eea037b0780784949c9a072231e8a5ff6e57f6d41468fe00" name="sysprof" arch="src">
  <version epoch="0" ver="3.38.1" rel="3.oe2203sp1"/>
  <changelog author="hanhui&lt;hanhui15@huawei.com&gt; - 3.38.1-2" date="1626782400">- delete rely on low version of the file</changelog>
  <changelog author="zhangpan&lt;zhangpan103@h-partners.com&gt; - 3.38.1-3" date="1674993600">- Fix glib2-static install dependency</changelog>
</package>
<package pkgid="4be9f494c5f012fbae34b448ffc2234f662138b038a9053e160476e8b3aa1faa" name="sysprof" arch="src">
  <version epoch="0" ver="3.38.1" rel="4.oe2203sp1"/>
  <changelog author="zhangpan&lt;zhangpan103@h-partners.com&gt; - 3.38.1-3" date="1674993600">- Fix glib2-static install dependency</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 3.38.1-4" date="1708344000">- rebuild for glib2 without sysprof</changelog>
</package>
<package pkgid="d94d86eaecfe625f975b2eebb77fec644063cb2bca22d2d6287fba0a6d7da08f" name="sysstat" arch="src">
  <version epoch="0" ver="12.5.4" rel="8.oe2203sp1"/>
  <changelog author="wuchaochao &lt;wuchaochao4@h-partners.com&gt; - 12.5.4-1" date="1638619200">- update version to 12.5.4</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 12.5.4-2" date="1651924800">- add missing changelog</changelog>
  <changelog author="wuchaochao &lt;cyanrose@yeah.net&gt; - 12.5.4-3" date="1655121600">- add check</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 12.5.4-4" date="1668081600">- fix CVE-2022-39377</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 12.5.4-5" date="1669377600">- update Source0</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 12.5.4-6" date="1681473600">- service auto start after install</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 12.5.4-7" date="1685016000">- fix CVE-2023-33204</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 12.5.4-8" date="1685361600">- add missing patch</changelog>
</package>
<package pkgid="11f2a97d841a5ad9476abf8c5cf6f1f61cac5c87f6ef1c440c503830b33d6a0e" name="systemd" arch="src">
  <version epoch="0" ver="249" rel="44.oe2203sp1"/>
  <changelog author="yangmingtai &lt;yangmingtai@huawei.com&gt; -249-35" date="1663329600">- revert:delete the initrd-usr-fs.target</changelog>
  <changelog author="yangmingtai &lt;yangmingtai@huawei.com&gt; -249-36" date="1664452800">- 1.change default ntp server
  2.correct the default value of RuntimeDirectoryInodesMax</changelog>
  <changelog author="wangyuhang &lt;wangyuhang27@huawei.com&gt; -249-37" date="1665403200">- update release number to 249-37 to synchronize master</changelog>
  <changelog author="wangyuhang &lt;wangyuhang27@huawei.com&gt; -249-38" date="1665403201">- backport: sync systemd-stable-249 patches from systemd community</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 249-39" date="1666872000">- Add sw64 architecture</changelog>
  <changelog author="yangmingtai &lt;yangmingtai@huawei.com&gt; -249-40" date="1667822400">- fix CVE-2022-3821</changelog>
  <changelog author="huajingyun&lt;huajingyun@loongson.cn&gt; - 249-41" date="1668513600">- Add loongarch64 architecture</changelog>
  <changelog author="yangmingtai &lt;yangmingtai@huawei.com&gt; -249-42" date="1669204800">- 1.change /etc/systemd/journald.conf ForwardToWall to no
  2.change DefaultLimitMEMLOCK to 64M
  3.replace openEuler to vendor
  4.delete useless file udev-61-openeuler-persistent-storage.rules</changelog>
  <changelog author="huajingyun&lt;huajingyun@loongson.cn&gt; - 249-43" date="1670846400">- Add loongarch for missing_syscall_def.h</changelog>
  <changelog author="huyubiao&lt;huyubiao@huawei.com&gt; - 249-44" date="1672228800">- fix CVE-2022-4415</changelog>
</package>
<package pkgid="eb0cfa641ec58b0bcfbf27f99a72254c8779ea89cbb8ea32540991ee3f07350c" name="systemd" arch="src">
  <version epoch="0" ver="249" rel="46.oe2203sp1"/>
  <changelog author="wangyuhang &lt;wangyuhang27@huawei.com&gt; -249-37" date="1665403200">- update release number to 249-37 to synchronize master</changelog>
  <changelog author="wangyuhang &lt;wangyuhang27@huawei.com&gt; -249-38" date="1665403201">- backport: sync systemd-stable-249 patches from systemd community</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 249-39" date="1666872000">- Add sw64 architecture</changelog>
  <changelog author="yangmingtai &lt;yangmingtai@huawei.com&gt; -249-40" date="1667822400">- fix CVE-2022-3821</changelog>
  <changelog author="huajingyun&lt;huajingyun@loongson.cn&gt; - 249-41" date="1668513600">- Add loongarch64 architecture</changelog>
  <changelog author="yangmingtai &lt;yangmingtai@huawei.com&gt; -249-42" date="1669204800">- 1.change /etc/systemd/journald.conf ForwardToWall to no
  2.change DefaultLimitMEMLOCK to 64M
  3.replace openEuler to vendor
  4.delete useless file udev-61-openeuler-persistent-storage.rules</changelog>
  <changelog author="huajingyun&lt;huajingyun@loongson.cn&gt; - 249-43" date="1670846400">- Add loongarch for missing_syscall_def.h</changelog>
  <changelog author="huyubiao&lt;huyubiao@huawei.com&gt; - 249-44" date="1672228800">- fix CVE-2022-4415</changelog>
  <changelog author="yangmingtai &lt;yangmingtai@huawei.com&gt; -249-45" date="1673611200">- backport patches from upstream and add patchs to enhance compatibility
  and features</changelog>
  <changelog author="yangmingtai &lt;yangmingtai@huawei.com&gt; -249-46" date="1674129600">- delete unused patch files</changelog>
</package>
<package pkgid="5d126ace086fb4ca27c251fcab52089b406e4348d61c86173f2615f79e4dd185" name="systemd" arch="src">
  <version epoch="0" ver="249" rel="58.oe2203sp1"/>
  <changelog author="hongjinghao &lt;hongjinghao@huawei.com&gt; - 249-49" date="1681128000">- backport: sync patches from systemd community</changelog>
  <changelog author="chenjiayi &lt;chenjiayi22@huawei.com&gt; - 249-50" date="1685793600">- backport upstream patches to fix event loss when the whole disk is locked</changelog>
  <changelog author="licunlong &lt;licunlong1@huawei.com&gt; - 249-51" date="1686225600">- set the cpuset.cpus/mems of machine.slice to all by default</changelog>
  <changelog author="hongjinghao &lt;hongjinghao@huawei.com&gt; - 249-52" date="1686830400">- backport: sync patches from systemd community</changelog>
  <changelog author="wangyuhang &lt;wangyuhang27@huawei.com&gt; - 249-53" date="1692100800">- backport: sync patches from systemd community</changelog>
  <changelog author="wangyuhang &lt;wangyuhang27@huawei.com&gt; - 249-54" date="1692273600">- add a new switch to control whether udev complies with the new SAT standards
  and add sense_data.py to check if the device meets the new SAT standards</changelog>
  <changelog author="shixin &lt;shixin21@huawei.com&gt; - 249-55" date="1692878400">- sysuesrs_dir, sysctl_dir, binfmt_dir, modules_load_dir reference directories in /usr/lib for embedded
- modify dns server address to avoid security risk for embedded
- add support to relabel systemd process for embedded
- add noexec mount option to strenthen tmp partition for embedded
- use yocto configs for embedded</changelog>
  <changelog author="wangyuhang &lt;wangyuhang27@huawei.com&gt; - 249-56" date="1696852800">- backport: sync patches from systemd community</changelog>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 249-57" date="1698062400">- change the permission on vhost-net and vhost-vsock to 0660</changelog>
  <changelog author="beta &lt;beta@yfqm.date&gt; - 249-58" date="1698753600">- enable libcryptsetup</changelog>
</package>
<package pkgid="3ebb48dd32d31e30c101b707106173bd52add24b4f410de902242095d4001bf8" name="systemd" arch="src">
  <version epoch="0" ver="249" rel="59.oe2203sp1"/>
  <changelog author="chenjiayi &lt;chenjiayi22@huawei.com&gt; - 249-50" date="1685793600">- backport upstream patches to fix event loss when the whole disk is locked</changelog>
  <changelog author="licunlong &lt;licunlong1@huawei.com&gt; - 249-51" date="1686225600">- set the cpuset.cpus/mems of machine.slice to all by default</changelog>
  <changelog author="hongjinghao &lt;hongjinghao@huawei.com&gt; - 249-52" date="1686830400">- backport: sync patches from systemd community</changelog>
  <changelog author="wangyuhang &lt;wangyuhang27@huawei.com&gt; - 249-53" date="1692100800">- backport: sync patches from systemd community</changelog>
  <changelog author="wangyuhang &lt;wangyuhang27@huawei.com&gt; - 249-54" date="1692273600">- add a new switch to control whether udev complies with the new SAT standards
  and add sense_data.py to check if the device meets the new SAT standards</changelog>
  <changelog author="shixin &lt;shixin21@huawei.com&gt; - 249-55" date="1692878400">- sysuesrs_dir, sysctl_dir, binfmt_dir, modules_load_dir reference directories in /usr/lib for embedded
- modify dns server address to avoid security risk for embedded
- add support to relabel systemd process for embedded
- add noexec mount option to strenthen tmp partition for embedded
- use yocto configs for embedded</changelog>
  <changelog author="wangyuhang &lt;wangyuhang27@huawei.com&gt; - 249-56" date="1696852800">- backport: sync patches from systemd community</changelog>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 249-57" date="1698062400">- change the permission on vhost-net and vhost-vsock to 0660</changelog>
  <changelog author="beta &lt;beta@yfqm.date&gt; - 249-58" date="1698753600">- enable libcryptsetup</changelog>
  <changelog author="hongjinghao &lt;hongjinghao@huawei.com&gt; - 249-59" date="1702382400">- backport: sync patches from systemd community</changelog>
</package>
<package pkgid="0e5861a3eebdbf25c8d7e32e32749efe98165491aca0f449b79445421db15f6c" name="systemd" arch="src">
  <version epoch="0" ver="249" rel="63.oe2203sp1"/>
  <changelog author="wangyuhang &lt;wangyuhang27@huawei.com&gt; - 249-54" date="1692273600">- add a new switch to control whether udev complies with the new SAT standards
  and add sense_data.py to check if the device meets the new SAT standards</changelog>
  <changelog author="shixin &lt;shixin21@huawei.com&gt; - 249-55" date="1692878400">- sysuesrs_dir, sysctl_dir, binfmt_dir, modules_load_dir reference directories in /usr/lib for embedded
- modify dns server address to avoid security risk for embedded
- add support to relabel systemd process for embedded
- add noexec mount option to strenthen tmp partition for embedded
- use yocto configs for embedded</changelog>
  <changelog author="wangyuhang &lt;wangyuhang27@huawei.com&gt; - 249-56" date="1696852800">- backport: sync patches from systemd community</changelog>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 249-57" date="1698062400">- change the permission on vhost-net and vhost-vsock to 0660</changelog>
  <changelog author="beta &lt;beta@yfqm.date&gt; - 249-58" date="1698753600">- enable libcryptsetup</changelog>
  <changelog author="hongjinghao &lt;hongjinghao@huawei.com&gt; - 249-59" date="1702382400">- backport: sync patches from systemd community</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 249-60" date="1702900800">- backport: sync patches from systemd community
  add backport-core-path-do-not-enqueue-new-job-in-.trigger_notify-.patch
      backport-socket-fix-use-of-ERRNO_IS_DISCONNECT.patch
      backport-sd-bus-fix-use-of-ERRNO_IS_DISCONNECT.patch
      backport-resolved-fix-use-of-ERRNO_IS_DISCONNECT.patch
      backport-bus-add-some-minimal-bounds-check-on-signatures.patch
      backport-udev-builtin-net_id-fix-potential-buffer-overflow.patch
      backport-hostname-Make-sure-we-pass-error-to-bus_verify_polki.patch
      backport-Limit-rlim_max-in-rlimit_nofile_safe-to-nr_open.patch
      backport-udev-raise-RLIMIT_NOFILE-as-high-as-we-can.patch</changelog>
  <changelog author="xujing &lt;xujing125@huawei.com&gt; - 249-61" date="1702987200">- backport: fix /boot unmounted issue when the device is suspended during boot time</changelog>
  <changelog author="wangyuhang &lt;wangyuhang27@huawei.com&gt; - 249-62" date="1703764800">- add: backport-json-use-unsigned-for-refernce-counter.patch
      backport-macro-check-over-flow-in-reference-counter.patch
      backport-sd-bus-fix-reference-counter-to-be-incremented.patch
      backport-sd-bus-introduce-ref-unref-function-for-track_item.patch
      backport-sd-bus-do-not-read-unused-value.patch
      backport-sd-bus-do-not-return-negative-errno-when-unknown-nam.patch
      backport-sd-bus-use-hashmap_contains-and-drop-unnecessary-cas.patch
      backport-test-shorten-code-a-bit.patch
      backport-test-add-several-tests-for-track-item.patch
      backport-Use-dummy-allocator-to-make-accesses-defined-as-per-standard.patch
      backport-sd-bus-switch-to-a-manual-overflow-check-in.patch</changelog>
  <changelog author="wangyuhang &lt;wangyuhang27@huawei.com&gt; - 249-63" date="1703764801">- actually check authenticated flag of SOA transaction in resolved</changelog>
</package>
<package pkgid="a9b98ae9920b54ff748475cc0773f357dfcff892fbcc73a5e313941410e7c07b" name="systemd" arch="src">
  <version epoch="0" ver="249" rel="64.oe2203sp1"/>
  <changelog author="shixin &lt;shixin21@huawei.com&gt; - 249-55" date="1692878400">- sysuesrs_dir, sysctl_dir, binfmt_dir, modules_load_dir reference directories in /usr/lib for embedded
- modify dns server address to avoid security risk for embedded
- add support to relabel systemd process for embedded
- add noexec mount option to strenthen tmp partition for embedded
- use yocto configs for embedded</changelog>
  <changelog author="wangyuhang &lt;wangyuhang27@huawei.com&gt; - 249-56" date="1696852800">- backport: sync patches from systemd community</changelog>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 249-57" date="1698062400">- change the permission on vhost-net and vhost-vsock to 0660</changelog>
  <changelog author="beta &lt;beta@yfqm.date&gt; - 249-58" date="1698753600">- enable libcryptsetup</changelog>
  <changelog author="hongjinghao &lt;hongjinghao@huawei.com&gt; - 249-59" date="1702382400">- backport: sync patches from systemd community</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 249-60" date="1702900800">- backport: sync patches from systemd community
  add backport-core-path-do-not-enqueue-new-job-in-.trigger_notify-.patch
      backport-socket-fix-use-of-ERRNO_IS_DISCONNECT.patch
      backport-sd-bus-fix-use-of-ERRNO_IS_DISCONNECT.patch
      backport-resolved-fix-use-of-ERRNO_IS_DISCONNECT.patch
      backport-bus-add-some-minimal-bounds-check-on-signatures.patch
      backport-udev-builtin-net_id-fix-potential-buffer-overflow.patch
      backport-hostname-Make-sure-we-pass-error-to-bus_verify_polki.patch
      backport-Limit-rlim_max-in-rlimit_nofile_safe-to-nr_open.patch
      backport-udev-raise-RLIMIT_NOFILE-as-high-as-we-can.patch</changelog>
  <changelog author="xujing &lt;xujing125@huawei.com&gt; - 249-61" date="1702987200">- backport: fix /boot unmounted issue when the device is suspended during boot time</changelog>
  <changelog author="wangyuhang &lt;wangyuhang27@huawei.com&gt; - 249-62" date="1703764800">- add: backport-json-use-unsigned-for-refernce-counter.patch
      backport-macro-check-over-flow-in-reference-counter.patch
      backport-sd-bus-fix-reference-counter-to-be-incremented.patch
      backport-sd-bus-introduce-ref-unref-function-for-track_item.patch
      backport-sd-bus-do-not-read-unused-value.patch
      backport-sd-bus-do-not-return-negative-errno-when-unknown-nam.patch
      backport-sd-bus-use-hashmap_contains-and-drop-unnecessary-cas.patch
      backport-test-shorten-code-a-bit.patch
      backport-test-add-several-tests-for-track-item.patch
      backport-Use-dummy-allocator-to-make-accesses-defined-as-per-standard.patch
      backport-sd-bus-switch-to-a-manual-overflow-check-in.patch</changelog>
  <changelog author="wangyuhang &lt;wangyuhang27@huawei.com&gt; - 249-63" date="1703764801">- actually check authenticated flag of SOA transaction in resolved</changelog>
  <changelog author="wangyuhang &lt;wangyuhang27@huawei.com&gt; - 249-64" date="1704715200">- disable libcryptsetup</changelog>
</package>
<package pkgid="f5e9f1712e2819b5d7cbcb1511f9c701fada94c95865a76d8037a2523763fb66" name="systemd" arch="src">
  <version epoch="0" ver="249" rel="71.oe2203sp1"/>
  <changelog author="wangyuhang &lt;wangyuhang27@huawei.com&gt; - 249-62" date="1703764800">- add: backport-json-use-unsigned-for-refernce-counter.patch
      backport-macro-check-over-flow-in-reference-counter.patch
      backport-sd-bus-fix-reference-counter-to-be-incremented.patch
      backport-sd-bus-introduce-ref-unref-function-for-track_item.patch
      backport-sd-bus-do-not-read-unused-value.patch
      backport-sd-bus-do-not-return-negative-errno-when-unknown-nam.patch
      backport-sd-bus-use-hashmap_contains-and-drop-unnecessary-cas.patch
      backport-test-shorten-code-a-bit.patch
      backport-test-add-several-tests-for-track-item.patch
      backport-Use-dummy-allocator-to-make-accesses-defined-as-per-standard.patch
      backport-sd-bus-switch-to-a-manual-overflow-check-in.patch</changelog>
  <changelog author="wangyuhang &lt;wangyuhang27@huawei.com&gt; - 249-63" date="1703764801">- actually check authenticated flag of SOA transaction in resolved</changelog>
  <changelog author="wangyuhang &lt;wangyuhang27@huawei.com&gt; - 249-64" date="1704715200">- disable libcryptsetup</changelog>
  <changelog author="hongjinghao &lt;hongjinghao@huawei.com&gt; - 249-65" date="1705579200">- add backport-core-add-possibility-to-not-track-certain-unit-types.patch</changelog>
  <changelog author="huajingyun &lt;huajingyun@loongson.cn&gt; - 249-66" date="1707048000">- fix src.rpm missing loongarch patches</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 249-67" date="1708516800">- fix the old symbolic links are not deleted when the NVMe partition is renamed</changelog>
  <changelog author="wangyuhang &lt;wangyuhang27@huawei.com&gt; - 249-68" date="1708603200">- backport: sync patches from systemd community
            add backport-journal-recalculate-line_max-when-stdout-stream-stat.patch
            backport-pid1-terminate-cylon-string.patch
            backport-pid1-move-draw_cylong-to-pretty-print.-ch.patch
            backport-test-add-test-for-draw_cylon.patch
            backport-locale-util-do-not-call-setlocale-when-multi-threade.patch
            backport-resolve-fix-wrong-error-cause-assignment-to-log_debu.patch
            backport-resolve-do-not-trigger-assertion-on-exit.patch
            backport-network-neighbor-add-missing-OOM-check.patch
            backport-dissect-tool-right-align-the-partition-number.patch
            backport-dissect-image-fix-fd-leak-in-dissected_image_acquire.patch
            backport-udev-even-if-a-device-is-a-zac-device-scsi-ID_SERIAL.patch
            backport-core-log-message-when-reloading-finishes.patch</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 249-69" date="1709121600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add backport-basic-fix-overflow-detection-in-sigbus_pop.patch
       backport-busctl-avoid-asserting-on-NULL-message.patch
       backport-resolve-don-t-add-sockets-to-the-graveyard-on-shutdo.patch
       backport-sd-journal-check-sd-event-state-before-setting-up-po.patch</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 249-70" date="1709553600">- move the architecture patches after Patch9800 (excluding Patch9800)
  delete the duplicate systemd-coredump.socket</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 249-71" date="1710590400">- fix mdadm blocking caused by incorrect stop of inactive MD devices during shutdown</changelog>
</package>
<package pkgid="7afd46c8e4025bbcb1bdafeeb168988aced672c8f3122b9d62c9024f99229344" name="systemd" arch="src">
  <version epoch="0" ver="249" rel="75.oe2203sp1"/>
  <changelog author="huajingyun &lt;huajingyun@loongson.cn&gt; - 249-66" date="1707048000">- fix src.rpm missing loongarch patches</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 249-67" date="1708516800">- fix the old symbolic links are not deleted when the NVMe partition is renamed</changelog>
  <changelog author="wangyuhang &lt;wangyuhang27@huawei.com&gt; - 249-68" date="1708603200">- backport: sync patches from systemd community
            add backport-journal-recalculate-line_max-when-stdout-stream-stat.patch
            backport-pid1-terminate-cylon-string.patch
            backport-pid1-move-draw_cylong-to-pretty-print.-ch.patch
            backport-test-add-test-for-draw_cylon.patch
            backport-locale-util-do-not-call-setlocale-when-multi-threade.patch
            backport-resolve-fix-wrong-error-cause-assignment-to-log_debu.patch
            backport-resolve-do-not-trigger-assertion-on-exit.patch
            backport-network-neighbor-add-missing-OOM-check.patch
            backport-dissect-tool-right-align-the-partition-number.patch
            backport-dissect-image-fix-fd-leak-in-dissected_image_acquire.patch
            backport-udev-even-if-a-device-is-a-zac-device-scsi-ID_SERIAL.patch
            backport-core-log-message-when-reloading-finishes.patch</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 249-69" date="1709121600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add backport-basic-fix-overflow-detection-in-sigbus_pop.patch
       backport-busctl-avoid-asserting-on-NULL-message.patch
       backport-resolve-don-t-add-sockets-to-the-graveyard-on-shutdo.patch
       backport-sd-journal-check-sd-event-state-before-setting-up-po.patch</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 249-70" date="1709553600">- move the architecture patches after Patch9800 (excluding Patch9800)
  delete the duplicate systemd-coredump.socket</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 249-71" date="1710590400">- fix mdadm blocking caused by incorrect stop of inactive MD devices during shutdown</changelog>
  <changelog author="hongjinghao &lt;hongjinghao@huawei.com&gt; - 249-72" date="1710676800">- Revert "backport-units-modprobe-.service-don-t-unescape-instance-name.patch"</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 249-73" date="1711540800">- DESC:add backport-core-exec-do-not-crash-with-UtmpMode-user-without-Us.patch
       backport-resolved-limit-the-number-of-signature-validations-i.patch
       backport-resolved-reduce-the-maximum-nsec3-iterations-to-100.patch</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 249-74" date="1713268800">- Update outdated URL</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 249-75" date="1713355200">- fix CVE-2023-50387 and CVE-2023-50868</changelog>
</package>
<package pkgid="8b3454e8129490410ee1ee86f82031095e216ae413c92cf9fc78f0dc23f38f03" name="systemd" arch="src">
  <version epoch="0" ver="249" rel="78.oe2203sp1"/>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 249-69" date="1709121600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add backport-basic-fix-overflow-detection-in-sigbus_pop.patch
       backport-busctl-avoid-asserting-on-NULL-message.patch
       backport-resolve-don-t-add-sockets-to-the-graveyard-on-shutdo.patch
       backport-sd-journal-check-sd-event-state-before-setting-up-po.patch</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 249-70" date="1709553600">- move the architecture patches after Patch9800 (excluding Patch9800)
  delete the duplicate systemd-coredump.socket</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 249-71" date="1710590400">- fix mdadm blocking caused by incorrect stop of inactive MD devices during shutdown</changelog>
  <changelog author="hongjinghao &lt;hongjinghao@huawei.com&gt; - 249-72" date="1710676800">- Revert "backport-units-modprobe-.service-don-t-unescape-instance-name.patch"</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 249-73" date="1711540800">- DESC:add backport-core-exec-do-not-crash-with-UtmpMode-user-without-Us.patch
       backport-resolved-limit-the-number-of-signature-validations-i.patch
       backport-resolved-reduce-the-maximum-nsec3-iterations-to-100.patch</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 249-74" date="1713268800">- Update outdated URL</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 249-75" date="1713355200">- fix CVE-2023-50387 and CVE-2023-50868</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 249-76" date="1714392000">- add backport-login-user-runtime-dir-properly-check-for-mount-poin.patch
      backport-user-util-validate-the-right-field.patch</changelog>
  <changelog author="wangyuhang &lt;wangyuhang27@huawei.com&gt; - 249-77" date="1717070400">- add backport-units-modprobe-.service-don-t-unescape-instance-name.patch</changelog>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 249-78" date="1718625600">- Add the FileDescriptorStorePreserve= option to the service</changelog>
</package>
<package pkgid="68eb35c91f037c2cd39cc6b658449b26c41a0fd4b19500085861c0cdbe89496b" name="systemd" arch="src">
  <version epoch="0" ver="249" rel="79.oe2203sp1"/>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 249-70" date="1709553600">- move the architecture patches after Patch9800 (excluding Patch9800)
  delete the duplicate systemd-coredump.socket</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 249-71" date="1710590400">- fix mdadm blocking caused by incorrect stop of inactive MD devices during shutdown</changelog>
  <changelog author="hongjinghao &lt;hongjinghao@huawei.com&gt; - 249-72" date="1710676800">- Revert "backport-units-modprobe-.service-don-t-unescape-instance-name.patch"</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 249-73" date="1711540800">- DESC:add backport-core-exec-do-not-crash-with-UtmpMode-user-without-Us.patch
       backport-resolved-limit-the-number-of-signature-validations-i.patch
       backport-resolved-reduce-the-maximum-nsec3-iterations-to-100.patch</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 249-74" date="1713268800">- Update outdated URL</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 249-75" date="1713355200">- fix CVE-2023-50387 and CVE-2023-50868</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 249-76" date="1714392000">- add backport-login-user-runtime-dir-properly-check-for-mount-poin.patch
      backport-user-util-validate-the-right-field.patch</changelog>
  <changelog author="wangyuhang &lt;wangyuhang27@huawei.com&gt; - 249-77" date="1717070400">- add backport-units-modprobe-.service-don-t-unescape-instance-name.patch</changelog>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 249-78" date="1718625600">- Add the FileDescriptorStorePreserve= option to the service</changelog>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 249-79" date="1719403200">- Revert "Add the FileDescriptorStorePreserve= option to the service"</changelog>
</package>
<package pkgid="8193cbf470c2103f9b48cdef15a24f3cd3222e9636d0a636ffda75182ac4e135" name="tang" arch="src">
  <version epoch="0" ver="7" rel="3.oe2203sp1"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 7-3" date="1688126400">- Fix CVE-2023-1672</changelog>
</package>
<package pkgid="309fbfce9713b170f68190bffdaffc0e3bc8c7b5b6596771f534aea4b712de71" name="tar" arch="src">
  <version epoch="2" ver="1.34" rel="4.oe2203sp1"/>
  <changelog author="shixuantong &lt;shixuantong&gt; - 2:1.32-2" date="1618401600">- fix CVE-2021-20193</changelog>
  <changelog author="shixuantong &lt;shixuantong&gt; - 2:1.32-3" date="1623326400">- add gcc to BuildRequires</changelog>
  <changelog author="shixuantong &lt;shixuantong&gt; - 2:1.34-1" date="1636804800">- update version to 1.34</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 2:1.34-2" date="1666872000">- Rebuild for next release</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 2:1.34-3" date="1668168000">- Add sw64 architecture</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; 2:1.34-4" date="1675857600">- fix CVE-2022-48303</changelog>
</package>
<package pkgid="86f50cde1a5cc2d49ba65b7077e4c90b84b43901261228b716459a49d79efa3e" name="tar" arch="src">
  <version epoch="2" ver="1.34" rel="5.oe2203sp1"/>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 2:1.34-2" date="1666872000">- Rebuild for next release</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 2:1.34-3" date="1668168000">- Add sw64 architecture</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; 2:1.34-4" date="1675857600">- fix CVE-2022-48303</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; 2:1.34-5" date="1701691200">- fix CVE-2023-39840</changelog>
</package>
<package pkgid="9e02375f2f16003f4590b0bedba578f7bdaa804b1c8697e02fcc4fa8a94b45e3" name="tcpdump" arch="src">
  <version epoch="14" ver="4.99.1" rel="6.oe2203sp1"/>
  <changelog author="xihaochen&lt;xihaochen@huawei.com&gt; - 4.99.1-1" date="1639483200">- Type:requirements
- ID:NA
- SUG:NA
- DESC:update tcpdump to 4.99.1</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 4.99.1-2" date="1654948800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:enable make check</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 14:4.99.1-3" date="1661860800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Set SA_RESTART on non-lethal signals (REQ_INFO, FLUSH_PCAP) to avoid corrupting binary pcap output</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 14:4.99.1-4" date="1661947200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix git warning when rpmbuild -ba compiling</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 14:4.99.1-5" date="1666699200">- Type:feature
- CVE:NA
- SUG:NA
- DESC:Add sw64 architecture</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 14:4.99.1-6" date="1680955200">- Type:CVE
- CVE:CVE-2023-1801
- SUG:NA
- DESC:fix CVE-2023-1801</changelog>
</package>
<package pkgid="3038f362be2b463dffde7c1ad2cb4fed3a3cedcc1bc90483f412172b5798df4d" name="telnet" arch="src">
  <version epoch="1" ver="0.17" rel="79.oe2203sp1"/>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1:0.17-79" date="1711972800">- Type:cves
- CVE:CVE-2022-39028
- SUG:NA
- DESC:fix CVE-2022-39028</changelog>
</package>
<package pkgid="a1f9acfec537a41c9ba467b06a2b1268849599b5cb85f97adc66c4e6e899bc27" name="tesla-polyglot" arch="src">
  <version epoch="0" ver="0.2.1" rel="4.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 0.2.1-4" date="1678363200">- Fix build failure due to snakeyaml update to 1.32</changelog>
</package>
<package pkgid="913a78bdeb7567a79e7c9d27d614bee3f0b37e676fd111d9326d0e7605e1fd16" name="testng" arch="src">
  <version epoch="0" ver="6.14.3" rel="7.oe2203sp1"/>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 6.14.3-7" date="1701691200">- Fix CVE-2022-4065 and change Source0</changelog>
</package>
<package pkgid="abeef084dadcb2ff6403dd93163617ee7de63aa167bb97665c89056433ef9fac" name="texlive-base" arch="src">
  <version epoch="7" ver="20180414" rel="34.oe2203sp1"/>
  <changelog author="Haiwei Li &lt;lihaiwei8@huawei.com&gt; - 20180414-31" date="1627732800">- Fix compilation failed due to multiple definition</changelog>
  <changelog author="caodongxia &lt;caodongxia@huawei.com&gt; - 20180414-32" date="1631275200">- Remove rpath</changelog>
  <changelog author="xu_ping &lt;xuping33@huawei.com&gt; - 20180414-33" date="1642593600">- remove useless BuildRequires poppler</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 7:20180414-34" date="1688385600">- Fix CVE-2023-32700</changelog>
</package>
<package pkgid="9bd63a794cceab0d1e9b24e1cf7e5984949933f0802ac763330d9f080499e8ec" name="texlive-base" arch="src">
  <version epoch="7" ver="20180414" rel="38.oe2203sp1"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 20180414-34" date="1673006400">- Fix build on riscv64</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 7:20180414-35" date="1688385600">- Fix CVE-2023-32700</changelog>
  <changelog author="yeqinglong &lt;yeqinglong@kylinsec.com.cn&gt; - 7:20180414-36" date="1691755200">- add sw_64 support and fix loongarch64 error</changelog>
  <changelog author="hefq343 &lt;fengqing.he@shingroup.cn&gt; - 7:20180414-37" date="1710763200">- add ppc64le support</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 7:20180414-38" date="1722859200">- Fix CVE-2023-46048</changelog>
</package>
<package pkgid="1b89a9687938633c16d1c1fb9badeaf754af54d591027cb834a9e682414198cb" name="tidy" arch="src">
  <version epoch="0" ver="5.7.28" rel="2.oe2203sp1"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.7.28-2" date="1703764800">- Fix CVE-2021-33391</changelog>
</package>
<package pkgid="8d33916bf275667e423e93bb5b6b590910bb344404df46da76d48356314b35b4" name="tigervnc" arch="src">
  <version epoch="0" ver="1.12.0" rel="9.oe2203sp1"/>
  <changelog author="quanhongfei &lt;quanhongfei@huawei.com&gt; - 1.12.0-1" date="1638964800">- Type:requirements
- ID:NA
- SUG:NA
- DESC:update tigervnc to 1.12.0</changelog>
  <changelog author="quanhongfei &lt;quanhongfei@huawei.com&gt; - 1.12.0-2" date="1641297600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Modify the installation dependency of tigervnc-server-module.</changelog>
  <changelog author="quanhongfei &lt;quanhongfei@huawei.com&gt; - 1.12.0-3" date="1644580800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:tigervnc does not privide tigervnc-license</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.12.0-4" date="1649764800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:change vncserver permission from 644 to 755</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.12.0-5" date="1649764801">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix vncserver unrecognized option rfbwait</changelog>
  <changelog author="ouyangminxiang &lt;ouyangminxiang@kylinsec.com.cn&gt; - 1.12.0-6" date="1649937600">- Type:translation
- ID:NA
- SUG:NA
- DESC:fix some translation of start menu</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.12.0-7" date="1654948800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: enable test</changelog>
  <changelog author="Lvcongqing &lt;lvcongqing@uniontech.com&gt; - 1.12.0-8" date="1678363200">- add BR xorg-x11-font-utils(fix issue:I6L35B)</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 1.12.0-9" date="1684843200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:rebuild for CVE-2023-1393</changelog>
</package>
<package pkgid="a84d45f2dc2f62d0b387d9c0140c03de1dd3f7bcd9014b1b0691f515dfc4ee2d" name="tmux" arch="src">
  <version epoch="0" ver="3.2a" rel="3.oe2203sp1"/>
  <changelog author="yangcheng &lt;yangcheng87@huawei.com&gt; - 3.2a-1" date="1638532800">- DESC:upgrade to 3.2a</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 3.2a-2" date="1666785600">- Rebuild for next release</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 3.2a-3" date="1675512000">- fix CVE-2022-47016</changelog>
</package>
<package pkgid="5c3d5d8b22d4abd7017cb1e92263d3fcabd2404aee75bac51c0369be4a9c7c36" name="tomcat" arch="src">
  <version epoch="1" ver="9.0.10" rel="29.oe2203sp1"/>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 1:9.0.10-20" date="1627560000">- Fix CVE-2021-30640</changelog>
  <changelog author="houyingchao &lt;houyingchao@huawei.com&gt; - 1:9.0.10-21" date="1633780800">- Fix CVE-2021-41079</changelog>
  <changelog author="liwu &lt;liwu13@huawei.com&gt; - 1:9.0.10-22" date="1635422400">- Fix CVE-2021-42340</changelog>
  <changelog author="caodongxia &lt;caodongxia@huawei.com&gt; - 1:9.0.10-23" date="1635940800">- Replace recommends tomcat-native with libtcnative-1-0</changelog>
  <changelog author="caodongxia &lt;caodongxia@huawei.com&gt; - 1:9.0.10-24" date="1636545600">- Replace recommends libtcnative-1-0 with requires libtcnative-1-0</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 1:9.0.10-25" date="1645185600">- Fix CVE-2022-23181</changelog>
  <changelog author="wangkai &lt;wangkai@h-partners.com - 1:9.0.10-26" date="1650888000">- Refix CVE-2021-41079</changelog>
  <changelog author="chenchen &lt;chen_aka_jan@163.com&gt; - 1:9.0.10-27" date="1653393600">- fix build error</changelog>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt; - 1:9.0.10-28" date="1660305600">- Update build-classpath calls to ECJ to specify the JAR we want to use</changelog>
  <changelog author="xulei &lt;xulei@xfusion.com&gt; - 1:9.0.10-29" date="1671624000">- Fix CVE-2022-42252</changelog>
</package>
<package pkgid="7ec8cdd30377cfa7b72c59f0ab433e77e0859a4e6f22aa130f49f4f28c7275fa" name="tomcat" arch="src">
  <version epoch="1" ver="9.0.10" rel="30.oe2203sp1"/>
  <changelog author="houyingchao &lt;houyingchao@huawei.com&gt; - 1:9.0.10-21" date="1633780800">- Fix CVE-2021-41079</changelog>
  <changelog author="liwu &lt;liwu13@huawei.com&gt; - 1:9.0.10-22" date="1635422400">- Fix CVE-2021-42340</changelog>
  <changelog author="caodongxia &lt;caodongxia@huawei.com&gt; - 1:9.0.10-23" date="1635940800">- Replace recommends tomcat-native with libtcnative-1-0</changelog>
  <changelog author="caodongxia &lt;caodongxia@huawei.com&gt; - 1:9.0.10-24" date="1636545600">- Replace recommends libtcnative-1-0 with requires libtcnative-1-0</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 1:9.0.10-25" date="1645185600">- Fix CVE-2022-23181</changelog>
  <changelog author="wangkai &lt;wangkai@h-partners.com - 1:9.0.10-26" date="1650888000">- Refix CVE-2021-41079</changelog>
  <changelog author="chenchen &lt;chen_aka_jan@163.com&gt; - 1:9.0.10-27" date="1653393600">- fix build error</changelog>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt; - 1:9.0.10-28" date="1660305600">- Update build-classpath calls to ECJ to specify the JAR we want to use</changelog>
  <changelog author="xulei &lt;xulei@xfusion.com&gt; - 1:9.0.10-29" date="1671624000">- Fix CVE-2022-42252</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:9.0.10-30" date="1681732800">- Fix CVE-2023-28708</changelog>
</package>
<package pkgid="c2f1f101ca5f7589db26a0ad41d456d1c5f0a4ec5596ce41fe158bdbb2fabd84" name="tomcat" arch="src">
  <version epoch="1" ver="9.0.10" rel="31.oe2203sp1"/>
  <changelog author="liwu &lt;liwu13@huawei.com&gt; - 1:9.0.10-22" date="1635422400">- Fix CVE-2021-42340</changelog>
  <changelog author="caodongxia &lt;caodongxia@huawei.com&gt; - 1:9.0.10-23" date="1635940800">- Replace recommends tomcat-native with libtcnative-1-0</changelog>
  <changelog author="caodongxia &lt;caodongxia@huawei.com&gt; - 1:9.0.10-24" date="1636545600">- Replace recommends libtcnative-1-0 with requires libtcnative-1-0</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 1:9.0.10-25" date="1645185600">- Fix CVE-2022-23181</changelog>
  <changelog author="wangkai &lt;wangkai@h-partners.com - 1:9.0.10-26" date="1650888000">- Refix CVE-2021-41079</changelog>
  <changelog author="chenchen &lt;chen_aka_jan@163.com&gt; - 1:9.0.10-27" date="1653393600">- fix build error</changelog>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt; - 1:9.0.10-28" date="1660305600">- Update build-classpath calls to ECJ to specify the JAR we want to use</changelog>
  <changelog author="xulei &lt;xulei@xfusion.com&gt; - 1:9.0.10-29" date="1671624000">- Fix CVE-2022-42252</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:9.0.10-30" date="1681732800">- Fix CVE-2023-28708</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:9.0.10-31" date="1694088000">- Fix CVE-2023-41080
- Add requires apache-commons-dbcp,pool,collections for fix path error</changelog>
</package>
<package pkgid="50d5993cb6e8b2be9fcfce41bdb108b2833e6333cb495cda9e02c14705cb9c9d" name="tomcat" arch="src">
  <version epoch="1" ver="9.0.10" rel="32.oe2203sp1"/>
  <changelog author="caodongxia &lt;caodongxia@huawei.com&gt; - 1:9.0.10-23" date="1635940800">- Replace recommends tomcat-native with libtcnative-1-0</changelog>
  <changelog author="caodongxia &lt;caodongxia@huawei.com&gt; - 1:9.0.10-24" date="1636545600">- Replace recommends libtcnative-1-0 with requires libtcnative-1-0</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 1:9.0.10-25" date="1645185600">- Fix CVE-2022-23181</changelog>
  <changelog author="wangkai &lt;wangkai@h-partners.com - 1:9.0.10-26" date="1650888000">- Refix CVE-2021-41079</changelog>
  <changelog author="chenchen &lt;chen_aka_jan@163.com&gt; - 1:9.0.10-27" date="1653393600">- fix build error</changelog>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt; - 1:9.0.10-28" date="1660305600">- Update build-classpath calls to ECJ to specify the JAR we want to use</changelog>
  <changelog author="xulei &lt;xulei@xfusion.com&gt; - 1:9.0.10-29" date="1671624000">- Fix CVE-2022-42252</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:9.0.10-30" date="1681732800">- Fix CVE-2023-28708</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:9.0.10-31" date="1694088000">- Fix CVE-2023-41080
- Add requires apache-commons-dbcp,pool,collections for fix path error</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:9.0.10-32" date="1697803200">- Fix CVE-2023-45648</changelog>
</package>
<package pkgid="2a15281d9f8b7aa64e7f7e9b35a37917ec238ca09088aed5886ebdeba34624c0" name="tomcat" arch="src">
  <version epoch="1" ver="9.0.10" rel="33.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 1:9.0.10-25" date="1645185600">- Fix CVE-2022-23181</changelog>
  <changelog author="wangkai &lt;wangkai@h-partners.com - 1:9.0.10-26" date="1650888000">- Refix CVE-2021-41079</changelog>
  <changelog author="chenchen &lt;chen_aka_jan@163.com&gt; - 1:9.0.10-27" date="1653393600">- fix build error</changelog>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt; - 1:9.0.10-28" date="1660305600">- Update build-classpath calls to ECJ to specify the JAR we want to use</changelog>
  <changelog author="xulei &lt;xulei@xfusion.com&gt; - 1:9.0.10-29" date="1671624000">- Fix CVE-2022-42252</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:9.0.10-30" date="1681732800">- Fix CVE-2023-28708</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:9.0.10-31" date="1694088000">- Fix CVE-2023-41080
- Add requires apache-commons-dbcp,pool,collections for fix path error</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:9.0.10-32" date="1697803200">- Fix CVE-2023-45648</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:9.0.10-33" date="1706011200">- Fix CVE-2024-21733,CVE-2023-24998,CVE-2023-28709,CVE-2023-42795</changelog>
</package>
<package pkgid="13309034e8f1a772339da217c6c13b70e578562213cdd8841d5fd3a1f5ef68a0" name="tpm2-tools" arch="src">
  <version epoch="0" ver="5.0" rel="6.oe2203sp1"/>
  <changelog author="jinlun &lt;jinlun@huawei.com&gt; - 5.0-5" date="1671192000">- fix build error</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 5.0-6" date="1714651200">- fix CVE-2024-29038 CVE-2024-29039</changelog>
</package>
<package pkgid="c5056b12346a3a80c8bf5dbd56570f0e0571551e92d31d3034ee22ab6b9d3583" name="tpm2-tss" arch="src">
  <version epoch="0" ver="3.1.0" rel="3.oe2203sp1"/>
  <changelog author="panxiaohe &lt;panxiaohe@huawei.com&gt; - 3.1.0-1" date="1638360000">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:update version to 3.1.0</changelog>
  <changelog author="jinlun &lt;jinlun@huawei.com&gt; - 3.1.0-2" date="1666094400">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:Rebuild for new release number</changelog>
  <changelog author="huangzq6 &lt;huangzhenqiang2@huawei.com&gt; - 3.1.0-3" date="1675166400">- Type:CVE
- ID:NA
- SUG:NA
- DESC:fix CVE-2023-22745</changelog>
</package>
<package pkgid="8d52dbf78d991e2d790543e74e044c97b28a0b02bf62887e249e0765f0f3a10c" name="tpm2-tss" arch="src">
  <version epoch="0" ver="3.1.0" rel="5.oe2203sp1"/>
  <changelog author="jinlun &lt;jinlun@huawei.com&gt; - 3.1.0-2" date="1666094400">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:Rebuild for new release number</changelog>
  <changelog author="huangzq6 &lt;huangzhenqiang2@huawei.com&gt; - 3.1.0-3" date="1675166400">- Type:CVE
- ID:NA
- SUG:NA
- DESC:fix CVE-2023-22745</changelog>
  <changelog author="jinlun &lt;jinlun@huawei.com&gt; - 3.1.0-4" date="1702555200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Specifies the owner group 59 of a user.</changelog>
  <changelog author="gengqihu &lt;gengqihu2@h-partners.com&gt; - 3.1.0-5" date="1715256000">- Type:CVE
- ID:NA
- SUG:NA
- DESC:fix CVE-2024-29040</changelog>
</package>
<package pkgid="0e84f765ed72dd88c3c6a5ea38c28ed9b84d655e6e133a7d5b5f084089d77a63" name="trace-cmd" arch="src">
  <version epoch="0" ver="2.9.2" rel="9.oe2203sp1"/>
  <changelog author="Guoxiaoqi &lt;guoxiaoqi2@huawei.com&gt; - 2.7-6" date="1627646400">- Fix build with gcc-10</changelog>
  <changelog author="houyingchao &lt;houyingchao@huawei.com&gt; - 2.9.2-1" date="1642507200">- Upgrade to 2.9.2 version</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-hpartners.com&gt; - 2.9.2-2" date="1659182400">- Del rpath in some binaries.</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 2.9.2-3" date="1670328000">- Add /sbin/ldconfig to post and postun</changelog>
  <changelog author="Bolehu &lt;heyaohua@xfusion.com&gt; - 2.9.2-4" date="1673006400">- trace-cmd report: Fix typos in error messages</changelog>
  <changelog author="Bolehu &lt;heyaohua@xfusion.com&gt; - 2.9.2-5" date="1673006401">- trace-cmd library: Fix version string memory leak</changelog>
  <changelog author="Bolehu &lt;heyaohua@xfusion.com&gt; - 2.9.2-6" date="1673006402">- trace-cmd library: Fixed a memory leak on input handler close</changelog>
  <changelog author="Bolehu &lt;heyaohua@xfusion.com&gt; - 2.9.2-7" date="1673092800">- Remove unneeded multiply in events timestamp reading</changelog>
  <changelog author="Bolehu &lt;heyaohua@xfusion.com&gt; - 2.9.2-8" date="1673092801">- Changing default install path of plugins</changelog>
  <changelog author="Bolehu &lt;heyaohua@xfusion.com&gt; - 2.9.2-9" date="1673265600">- Fix broken profile command</changelog>
</package>
<package pkgid="acd8daddb62fd801feb6d092665d18c9f629daeefe5734273c362e21fb265996" name="traceroute" arch="src">
  <version epoch="3" ver="2.1.2" rel="2.oe2203sp1"/>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 3:2.1.2-1" date="1694779200">- Type:requirement
- Id:NA
- SUG:NA
- DESC:Update to version 2.1.2</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 3:2.1.2-2" date="1698667200">- Type:CVE
- CVE:CVE-2023-46316
- SUG:NA
- DESC:fix CVE-2023-46316</changelog>
</package>
<package pkgid="3730c9e691e5f4ba9d5e72e0326fa987b77b1e07d8aa850b7cf1a837d8087a7f" name="tss2" arch="src">
  <version epoch="0" ver="1470" rel="3.oe2203sp1"/>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; - 1331-3" date="1579262400">- Ensure tssprintcmd has the compilation compilation flags,
  PIC in particular</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1331-4" date="1580472000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Tom Stellard &lt;tstellar@redhat.com&gt; - 1331-5" date="1581681600">- Use make_build macro
- https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make</changelog>
  <changelog author="Roberto Sassu &lt;roberto.sassu@huawei.com&gt; - 1470-1" date="1594728000">- Import in openEuler</changelog>
  <changelog author="Guoxiaoqi &lt;guoxiaoqi2@huawei.com&gt; - 1470-2" date="1627646400">- Fix build with gcc-10</changelog>
  <changelog author="sunguoshuai &lt;sunguoshuai@huawei.com&gt; 1470-3" date="1631188800">- del rpath</changelog>
</package>
<package pkgid="01e40ee02865f9ff65f773df28e5e52406a785109104f0ea146ea7994040804a" name="tuna" arch="src">
  <version epoch="0" ver="0.14.1" rel="3.oe2203sp1"/>
  <changelog author="xu_ping &lt;xuping33@h-partners.com&gt; - 0.14.1-2" date="1669032000">- Modify invalid source</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 0.14.1-3" date="1706788800">- Modify tuna config.py use gtk3</changelog>
</package>
<package pkgid="d928513a4d018079944f5f7788c55e8b70306555f8e2d643ca4a70f2efc5be2e" name="tuna" arch="src">
  <version epoch="0" ver="0.19" rel="1.oe2203sp1"/>
  <changelog author="xu_ping &lt;xuping33@h-partners.com&gt; - 0.14.1-2" date="1669032000">- Modify invalid source</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 0.14.1-3" date="1706788800">- Modify tuna config.py use gtk3</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 0.19-1" date="1708689600">- Upgrade to 0.19 for fix tuna gui execution error</changelog>
</package>
<package pkgid="2f7ec0c2d86840d561ad8ea1035eaade0fa7c9e91816c87257f7973cc02e6cc4" name="tzdata" arch="src">
  <version epoch="0" ver="2022a" rel="18.oe2203sp1"/>
  <changelog author="qinyu&lt;qinyu32@huawei.com&gt; - 2022a-9" date="1669636800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Most of Greenland stops clock-changing after March</changelog>
  <changelog author="qinyu&lt;qinyu32@huawei.com&gt; - 2022a-10" date="1669809600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Greenland change should affect only America/Nuuk; The northern edge of Chihuahua changes to US rules</changelog>
  <changelog author="qinyu&lt;qinyu32@huawei.com&gt; - 2022a-11" date="1670241600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Much of Greenland still uses DST from 2024 on</changelog>
  <changelog author="qinyu&lt;qinyu32@huawei.com&gt; - 2022a-12" date="1678449600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Egypt now uses DST again</changelog>
  <changelog author="qinyu&lt;qinyu32@huawei.com&gt; - 2022a-13" date="1679054400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: This year Morocco springs forward April 23, not April 30</changelog>
  <changelog author="qinyu&lt;qinyu32@huawei.com&gt; - 2022a-14" date="1680782400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Palestine no longer observes DST during Ramadan</changelog>
  <changelog author="qinyu&lt;qinyu32@huawei.com&gt; - 2022a-15" date="1680782401">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Greenland changed standard time already</changelog>
  <changelog author="langfei&lt;langfei@huawei.com&gt; - 2022a-16" date="1702468800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Fix Palestine predictions for 2072 through 2075; Ittoqqortoormiit (America/Scoresbysund) zone change.</changelog>
  <changelog author="liuchao &lt;liuchao173@huawei.com&gt; - 2022a-17" date="1706011200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Vostok switches to +05; Sync Casey data from timeanddata.com; Kazakhstan unifies on UTC+5</changelog>
  <changelog author="liuchao &lt;liuchao173@huawei.com&gt; - 2022a-18" date="1707048000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Palestine springs forward a week later after Ramadan</changelog>
</package>
<package pkgid="32e6c11bfe876b816be6c04d3ae027da11c73dccce6be6ac46aef84eee87422b" name="uboot-tools" arch="src">
  <version epoch="0" ver="2021.10" rel="8.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 2021.10-7" date="1664366400">- fix CVE-2022-30767</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 2021.10-8" date="1727179200">- fix CVE-2022-2347</changelog>
</package>
<package pkgid="73324617f4f0995f4efe366e82fda1d4b931588817d9de839899e28fa6f5b5e3" name="unbound" arch="src">
  <version epoch="0" ver="1.13.2" rel="10.oe2203sp1"/>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.13.2-3" date="1647864000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix -q doesn't work when use with 'unbound-control stats_shm'</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.13.2-4" date="1654948800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove buildin key
       add macros to control if key files permissons is 600 or 644
       remove useless BuildRequires:unbound-libs</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 1.13.2-5" date="1659528000">- Type:cves
- CVE:CVE-2022-30698 CVE-2022-30699
- SUG:NA
- DESC:fix CVE-2022-30698 and CVE-2022-30699</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 1.13.2-6" date="1663848000">- Type:cves
- CVE:CVE-2022-3204
- SUG:NA
- DESC:fix CVE-2022-3204</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.13.2-7" date="1677067200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport to fix upstream issue #610 #611</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.13.2-8" date="1677844800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:change run directory from /var/run to /run to fix "/usr/lib/tmpfiles.d/unbound.conf:1: xxxx"</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.13.2-9" date="1708689600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix CVE-2023-50387 CVE-2023-50868</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.13.2-10" date="1709035200">- Type:cves
- CVE:CVE-2024-1488
- SUG:NA
- DESC:fix CVE-2024-1488</changelog>
</package>
<package pkgid="c70a32587e0f77f8ce0c1c9dca9546e1dd4f3765875bb14ab493f7518958af01" name="unbound" arch="src">
  <version epoch="0" ver="1.13.2" rel="11.oe2203sp1"/>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.13.2-3" date="1647864000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix -q doesn't work when use with 'unbound-control stats_shm'</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.13.2-4" date="1654948800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove buildin key
       add macros to control if key files permissons is 600 or 644
       remove useless BuildRequires:unbound-libs</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 1.13.2-5" date="1659528000">- Type:cves
- CVE:CVE-2022-30698 CVE-2022-30699
- SUG:NA
- DESC:fix CVE-2022-30698 and CVE-2022-30699</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 1.13.2-6" date="1663848000">- Type:cves
- CVE:CVE-2022-3204
- SUG:NA
- DESC:fix CVE-2022-3204</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.13.2-7" date="1677067200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport to fix upstream issue #610 #611</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.13.2-8" date="1677844800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:change run directory from /var/run to /run to fix "/usr/lib/tmpfiles.d/unbound.conf:1: xxxx"</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.13.2-9" date="1708689600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix CVE-2023-50387 CVE-2023-50868</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.13.2-10" date="1709035200">- Type:cves
- CVE:CVE-2024-1488
- SUG:NA
- DESC:fix CVE-2024-1488</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.13.2-11" date="1709640000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:change ExecReload to fix reload failure</changelog>
</package>
<package pkgid="d9e7826ad6661aaa21f762ef8f961adb5d95741ad81f90d1a250811794170632" name="unbound" arch="src">
  <version epoch="0" ver="1.13.2" rel="12.oe2203sp1"/>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 1.13.2-6" date="1663848000">- Type:cves
- CVE:CVE-2022-3204
- SUG:NA
- DESC:fix CVE-2022-3204</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.13.2-7" date="1677067200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport to fix upstream issue #610 #611</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.13.2-8" date="1677844800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:change run directory from /var/run to /run to fix "/usr/lib/tmpfiles.d/unbound.conf:1: xxxx"</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.13.2-9" date="1708689600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix CVE-2023-50387 CVE-2023-50868</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.13.2-10" date="1709035200">- Type:cves
- CVE:CVE-2024-1488
- SUG:NA
- DESC:fix CVE-2024-1488</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.13.2-11" date="1709640000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:change ExecReload to fix reload failure</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.13.2-12" date="1724068800">- Type:cves
- CVE:CVE-2024-43167 CVE-2024-43168
- SUG:NA
- DESC:fix CVE-2024-43167 CVE-2024-43168</changelog>
</package>
<package pkgid="36864edee202461aa058d17207257e48feefbf9495f71d2e57e5f681aab6fb9b" name="unbound" arch="src">
  <version epoch="0" ver="1.13.2" rel="13.oe2203sp1"/>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 1.13.2-6" date="1663848000">- Type:cves
- CVE:CVE-2022-3204
- SUG:NA
- DESC:fix CVE-2022-3204</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.13.2-7" date="1677067200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport to fix upstream issue #610 #611</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.13.2-8" date="1677844800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:change run directory from /var/run to /run to fix "/usr/lib/tmpfiles.d/unbound.conf:1: xxxx"</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.13.2-9" date="1708689600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix CVE-2023-50387 CVE-2023-50868</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.13.2-10" date="1709035200">- Type:cves
- CVE:CVE-2024-1488
- SUG:NA
- DESC:fix CVE-2024-1488</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.13.2-11" date="1709640000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:change ExecReload to fix reload failure</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.13.2-12" date="1724068800">- Type:cves
- CVE:CVE-2024-43167 CVE-2024-43168
- SUG:NA
- DESC:fix CVE-2024-43167 CVE-2024-43168</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.13.2-13" date="1724673600">- Type:cves
- CVE:CVE-2024-43168
- SUG:NA
- DESC:fix CVE-2024-43168 better</changelog>
</package>
<package pkgid="fdadb69ad98eb7062febda02a1681a2f9c7e61434c0fd59cf5ff35598e14b369" name="unbound" arch="src">
  <version epoch="0" ver="1.13.2" rel="7.oe2203sp1"/>
  <changelog author="lijingyuan &lt;lijingyuan3@huawei.com&gt; - 1.10.1-4" date="1622116800">- Type:bufix
- ID:NA
- SUG:NA
- DESC:Add the compilation dependency of gcc.</changelog>
  <changelog author="chenyanpanHW &lt;chenyanpan@huawei.com&gt; - 1.10.1-5" date="1629979200">- Type: requirement
- ID:   NA
- SUG:  NA
- DESC: unbound-libs remove Requires systemd</changelog>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 1.10.1-6" date="1630411200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix error when install unbound-libs</changelog>
  <changelog author="quanhongfei &lt;quanhongfei@huawei.com&gt; - 1.13.2-1" date="1638792000">- Type:requirement
- ID:NA
- SUG:NA
- DESC:update unbound version to 1.13.2</changelog>
  <changelog author="quanhongfei &lt;quanhongfei@h-partners.com&gt; - 1.13.2-2" date="1643198400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:unbound-libs remove requires libpython3.8.so</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.13.2-3" date="1647864000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix -q doesn't work when use with 'unbound-control stats_shm'</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.13.2-4" date="1654948800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove buildin key
       add macros to control if key files permissons is 600 or 644
       remove useless BuildRequires:unbound-libs</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 1.13.2-5" date="1659528000">- Type:cves
- CVE:CVE-2022-30698 CVE-2022-30699
- SUG:NA
- DESC:fix CVE-2022-30698 and CVE-2022-30699</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 1.13.2-6" date="1663848000">- Type:cves
- CVE:CVE-2022-3204
- SUG:NA
- DESC:fix CVE-2022-3204</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.13.2-7" date="1677067200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport to fix upstream issue #610 #611</changelog>
</package>
<package pkgid="c62d6151030adb09f12f01e6968f33275480bbebb53f178c643471e073aa1ef4" name="unbound" arch="src">
  <version epoch="0" ver="1.13.2" rel="8.oe2203sp1"/>
  <changelog author="chenyanpanHW &lt;chenyanpan@huawei.com&gt; - 1.10.1-5" date="1629979200">- Type: requirement
- ID:   NA
- SUG:  NA
- DESC: unbound-libs remove Requires systemd</changelog>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 1.10.1-6" date="1630411200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix error when install unbound-libs</changelog>
  <changelog author="quanhongfei &lt;quanhongfei@huawei.com&gt; - 1.13.2-1" date="1638792000">- Type:requirement
- ID:NA
- SUG:NA
- DESC:update unbound version to 1.13.2</changelog>
  <changelog author="quanhongfei &lt;quanhongfei@h-partners.com&gt; - 1.13.2-2" date="1643198400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:unbound-libs remove requires libpython3.8.so</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.13.2-3" date="1647864000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix -q doesn't work when use with 'unbound-control stats_shm'</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.13.2-4" date="1654948800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove buildin key
       add macros to control if key files permissons is 600 or 644
       remove useless BuildRequires:unbound-libs</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 1.13.2-5" date="1659528000">- Type:cves
- CVE:CVE-2022-30698 CVE-2022-30699
- SUG:NA
- DESC:fix CVE-2022-30698 and CVE-2022-30699</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 1.13.2-6" date="1663848000">- Type:cves
- CVE:CVE-2022-3204
- SUG:NA
- DESC:fix CVE-2022-3204</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.13.2-7" date="1677067200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport to fix upstream issue #610 #611</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.13.2-8" date="1677844800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:change run directory from /var/run to /run to fix "/usr/lib/tmpfiles.d/unbound.conf:1: xxxx"</changelog>
</package>
<package pkgid="06291cb29848396cd0723a32394c68bb69ffeb937c25e1a617b97f99ca92110c" name="undertow" arch="src">
  <version epoch="1" ver="1.4.0" rel="5.oe2203sp1"/>
  <changelog author="houyingchao &lt;houyingchao@huawei.com&gt; - 1.4.0-2" date="1635336000">- Fix CVE-2020-10705</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 1.4.0-3" date="1635422400">- Fix CVE-2019-3888</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 1.4.0-4" date="1635508800">- Fix CVE-2020-10719</changelog>
  <changelog author="mayp &lt;mayanping@ncti-gba.cn&gt; - 1:1.4.0-5" date="1680523200">- Fix CVE-2023-1108</changelog>
</package>
<package pkgid="8cb2c4b955087f39ac85c6ced951dfd1be7d1735e671cc101317140cf887e129" name="unixODBC" arch="src">
  <version epoch="0" ver="2.3.7" rel="3.h1.oe2203sp1"/>
  <changelog author="hanqiudan &lt;hanqiudan@huawei.com&gt; - 2.3.7-3.h1" date="1711195200">- fix CVE-2024-1013</changelog>
</package>
<package pkgid="79bf8f4d818ea8adc9678e0630e08d79ea1576ed504c3fd117fb66c2aa534ce8" name="uriparser" arch="src">
  <version epoch="0" ver="0.9.6" rel="2.oe2203sp1"/>
  <changelog author="kouwenqi &lt;kouwenqi@kylinos.cn&gt; - 0.9.6-2" date="1714996800">- fix CVE-2024-34402,CVE-2024-34403</changelog>
</package>
<package pkgid="3dbdd9cf94432ebd8bf3f773197f273149b8cc91c6afd52ad7ee6097f2c7a61d" name="util-linux" arch="src">
  <version epoch="0" ver="2.37.2" rel="28.oe2203sp1"/>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 2.37.2-19" date="1685966400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync community patches
       [add]backport-libfdisk-Fix-randomly-generated-GPT-UUID-s.patch
       backport-write-correctly-handle-wide-characters.patch
       backport-wall-convert-homebrew-buffering-to-open_memstream.patch
       backport-wall-use-fputs_careful.patch
       backport-hexdump-parse-handle-truncated-format-pattern.patch
       backport-libblkid-copy-BLKID_PARTS_FORCE_GPT-to-whole-disk-pr.patch
       backport-lscpu-fix-p-output-all-caches-delimiter.patch
       backport-add-return-in-supam_conv-function.patch
       backport-wrap-return-in-else-directive-to-avoid-dead-code.patch
       backport-sulogin-ignore-none-existing-console-devices.patch
       backport-sulogin-fix-KDGKBMODE-ifdef.patch</changelog>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 2.37.2-20" date="1686830400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync community patches
       [add]backport-lib-caputils-fix-integer-handling-issues-coverity-sc.patch
       backport-unshare-Move-implementation-of-keep-caps-option-to-l.patch</changelog>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 2.37.2-21" date="1691064000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync community patches
       [add]backport-libblkid-jfs-avoid-undefined-shift.patch
       backport-cfdisk-add-hint-about-labels-for-bootable-flag.patch
       backport-logger-initialize-socket-credentials-contol-union.patch</changelog>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 2.37.2-22" date="1693828800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync community patches
       [add]backport-column-fix-buffer-overflow-when-l-specified.patch
       backport-column-fix-greedy-mode-on-l.patch
       backport-column-fix-memory-leak.patch
       backport-column-fix-l.patch</changelog>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 2.37.2-23" date="1702555200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync community patches
       [add]backport-scriptreplay-support-ctrl-s-and-ctrl-g.patch
       backport-login-use-correct-terminal-fd-during-setup.patch
       backport-login-prevent-undefined-ioctl-and-tcsetattr-calls.patch
       backport-libblkid-avoid-memory-leak-of-cachefile-path.patch
       backport-more-avoid-out-of-bound-access.patch
       backport-lslogins-fix-realloc-loop-allocation-size.patch
       backport-ldattach-don-t-call-exit-from-signal-handler.patch
       backport-libblkid-ntfs-validate-that-sector_size-is-a-power-o.patch
       backport-blkid-fix-call-to-err_exclusive_options.patch
       backport-libblkid-reset-errno-before-calling-probefuncs.patch
       backport-lib-path-fix-possible-out-of-boundary-access.patch
       backport-libmount-improve-mnt_table_next_child_fs.patch
       backport-libmount-fix-possible-NULL-dereference-coverity-scan.patch</changelog>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 2.37.2-24" date="1705406400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync community patches
	[add]backport-libsmartcols-drop-spourious-newline-in-between-strea.patch
	backport-libsmartcols-flush-correct-stream.patch
	backport-libsmartcols-only-recognize-closed-object-as-final-e.patch
	backport-cal-avoid-out-of-bound-write.patch
	backport-libfdisk-sun-properly-initialize-partition-data.patch</changelog>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 2.37.2-25" date="1708344000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:solve the issue of ext4 is incorrectly probed as drbd
        [add]backport-include-c.h-add-helpers-for-unaligned-structure-acce.patch
        backport-libblkid-probe-read-data-in-chunks.patch
        backport-libblkid-avoid-aligning-out-of-probing-area.patch
        backport-libblkid-drbd-validate-zero-padding.patch</changelog>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 2.37.2-26" date="1709899200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync community patches
       backport-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-receive.patch
       backport-libblkid-hfsplus-reduce-false-positive.patch
       backport-wall-fix-calloc-cal-Werror-calloc-transposed-args.patch
       backport-libblkid-drbd-reduce-false-positive.patch
       backport-lib-cpuset-exit-early-from-cpulist_parse.patch</changelog>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 2.37.2-27" date="1710158400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync community patches
       backport-sys-utils-lscpu-Unblock-SIGSEGV-before-vmware_bdoor.patch
       backport-libblkid-Check-offset-in-LUKS2-header.patch
       backport-more-fix-poll-use.patch</changelog>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 2.37.2-28" date="1711713600">- Type:CVE
- CVE:CVE-2024-28085
- SUG:NA
- DESC:fix CVE-2024-28085</changelog>
</package>
<package pkgid="cf523fee84f90a31257d1abbef3f6cfbe090a95a7b6b5fff43a59c02f9723e70" name="util-linux" arch="src">
  <version epoch="0" ver="2.37.2" rel="33.oe2203sp1"/>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 2.37.2-24" date="1705406400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync community patches
	[add]backport-libsmartcols-drop-spourious-newline-in-between-strea.patch
	backport-libsmartcols-flush-correct-stream.patch
	backport-libsmartcols-only-recognize-closed-object-as-final-e.patch
	backport-cal-avoid-out-of-bound-write.patch
	backport-libfdisk-sun-properly-initialize-partition-data.patch</changelog>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 2.37.2-25" date="1708344000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:solve the issue of ext4 is incorrectly probed as drbd
        [add]backport-include-c.h-add-helpers-for-unaligned-structure-acce.patch
        backport-libblkid-probe-read-data-in-chunks.patch
        backport-libblkid-avoid-aligning-out-of-probing-area.patch
        backport-libblkid-drbd-validate-zero-padding.patch</changelog>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 2.37.2-26" date="1709899200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync community patches
       backport-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-receive.patch
       backport-libblkid-hfsplus-reduce-false-positive.patch
       backport-wall-fix-calloc-cal-Werror-calloc-transposed-args.patch
       backport-libblkid-drbd-reduce-false-positive.patch
       backport-lib-cpuset-exit-early-from-cpulist_parse.patch</changelog>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 2.37.2-27" date="1710158400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync community patches
       backport-sys-utils-lscpu-Unblock-SIGSEGV-before-vmware_bdoor.patch
       backport-libblkid-Check-offset-in-LUKS2-header.patch
       backport-more-fix-poll-use.patch</changelog>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 2.37.2-28" date="1711713600">- Type:CVE
- CVE:CVE-2024-28085
- SUG:NA
- DESC:fix CVE-2024-28085</changelog>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 2.37.2-29" date="1713787200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add provides and support enable-raw
       The current version of the kernel also supports the raw driver.
       To keep consistent with the previous version, roll back the modification.</changelog>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 2.37.2-30" date="1714305600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix lscpu core dump
       backport-lscpu-don-t-use-NULL-sharedmap.patch
       backport-lscpu-use-topology-maps-in-more-robust-way.patch</changelog>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 2.37.2-31" date="1715083200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync community patches
       backport-hexdump-check-blocksize-when-display-data.patch
       backport-lslocks-fix-buffer-overflow.patch
       backport-last-avoid-out-of-bounds-array-access.patch
       backport-lsipc-fix-semaphore-USED-counter.patch</changelog>
  <changelog author="yanglongkang &lt;yanglongkang@h-partners.com&gt; - 2.37.2-32" date="1717761600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync community patches
       backport-uuidd-fix-open-lock-state-issue.patch</changelog>
  <changelog author="hefq343 &lt;fengqing.he@shingroup.cn&gt; - 2.37.2-33" date="1718712000">- Type:update
- CVE:NA
- SUG:NA
- DESC:add support for ppc64le</changelog>
</package>
<package pkgid="13d372778b6cadf4d0cc8d55deccdb8171d71535adffacb949fb34e6f7414df2" name="varnish" arch="src">
  <version epoch="0" ver="7.0.1" rel="9.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 7.0.1-1" date="1640779200">- Upgrade varnish to 7.0.1</changelog>
  <changelog author="wulei &lt;wulei80@huawei.com&gt; - 7.0.1-2" date="1642766400">- Fix varnish-devel installation failure</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 7.0.1-3" date="1650974400">- Fix CVE-2022-23959</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 7.0.1-4" date="1661256000">- Fix CVE-2022-38150</changelog>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt; - 7.0.1-5" date="1668686400">- Replace openEuler with vendor</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 7.0.1-6" date="1669118400">- Fix CVE-2022-45060</changelog>
  <changelog author="caodongxia &lt;caodongxia@huawei.com&gt; - 7.0.1-7" date="1669723200">- Fix varnish.service reload failed due to miss conf</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 7.0.1-8" date="1670328000">- Fix strip safe compile options</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 7.0.1-9" date="1702382400">- Fix CVE-2022-45059</changelog>
</package>
<package pkgid="d54675bc7365f3b8a5ab0c06581421f576135a1be1d23437d5bc041f8357e0fa" name="varnish" arch="src">
  <version epoch="0" ver="7.4.2" rel="1.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 7.0.1-3" date="1650974400">- Fix CVE-2022-23959</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 7.0.1-4" date="1661256000">- Fix CVE-2022-38150</changelog>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt; - 7.0.1-5" date="1668686400">- Replace openEuler with vendor</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 7.0.1-6" date="1669118400">- Fix CVE-2022-45060</changelog>
  <changelog author="caodongxia &lt;caodongxia@huawei.com&gt; - 7.0.1-7" date="1669723200">- Fix varnish.service reload failed due to miss conf</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 7.0.1-8" date="1670328000">- Fix strip safe compile options</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 7.0.1-9" date="1702382400">- Fix CVE-2022-45059</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 7.4.2-1" date="1708171200">- Update to 7.4.2 for fix CVE-2023-44487</changelog>
</package>
<package pkgid="a819615ed0e3b836d76beac4c852358e1dec054c380a66e4aa38d25ed63a4b72" name="varnish" arch="src">
  <version epoch="0" ver="7.4.3" rel="1.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 7.0.1-3" date="1650974400">- Fix CVE-2022-23959</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 7.0.1-4" date="1661256000">- Fix CVE-2022-38150</changelog>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt; - 7.0.1-5" date="1668686400">- Replace openEuler with vendor</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 7.0.1-6" date="1669118400">- Fix CVE-2022-45060</changelog>
  <changelog author="caodongxia &lt;caodongxia@huawei.com&gt; - 7.0.1-7" date="1669723200">- Fix varnish.service reload failed due to miss conf</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 7.0.1-8" date="1670328000">- Fix strip safe compile options</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 7.0.1-9" date="1702382400">- Fix CVE-2022-45059</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 7.4.2-1" date="1708171200">- Update to 7.4.2 for fix CVE-2023-44487</changelog>
  <changelog author="zhangxingrong &lt;zhangxingrong@uniontech.com&gt; - 7.4.3-1" date="1711368000">- Update to 7.4.3 for fix CVE-2024-30156</changelog>
</package>
<package pkgid="744e8f35b0635275c6fa963304834c6d0deffaddbed00e7a5dacc2bccc45099b" name="vdo" arch="src">
  <version epoch="0" ver="8.1.0.264" rel="1.oe2203sp1"/>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 6.2.6.14-1" date="1653048000">- Upgrade to 6.2.6.14</changelog>
  <changelog author="yeqinglong &lt;yeqinglong@kylinsec.com.cn&gt; - 6.2.6.14-2" date="1691668800">- add loongarch64 and sw_64 support</changelog>
  <changelog author="Ge Wang &lt;wang__ge@126.com&gt; - 8.1.0.264-1" date="1715083200">- Upgrade to 8.1.0.264</changelog>
</package>
<package pkgid="8a3603bc098c58096c785341ac633fe38bfe492f8cc7cabea27b56c47205b9ba" name="vim" arch="src">
  <version epoch="2" ver="9.0" rel="11.oe2203sp1"/>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-2" date="1669636800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix CVE-2022-4141 and delete irrelevant log file</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-3" date="1669896000">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:disable make check for ebs build</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-4" date="1670328000">- Type:CVE
- ID:CVE-2022-3491 CVE-2022-3520 CVE-2022-3591
- SUG:NA
- DESC:fix CVE-2022-3491 CVE-2022-3520 CVE-2022-3591</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-5" date="1670500800">- Type:CVE
- ID:CVE-2022-4292 CVE-2022-4293
- SUG:NA
- DESC:fix CVE-2022-4292 CVE-2022-4293</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-6" date="1670846400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:remove rpath and runpath of exec files and libraries</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-7" date="1673265600">- Type:CVE
- ID:CVE-2023-0049 CVE-2023-0051 CVE-2023-0054
- SUG:NA
- DESC:CVE-2023-0049 CVE-2023-0051 CVE-2023-0054</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-8" date="1674993600">- Type:CVE
- ID:CVE-2022-47024 CVE-2023-0288
- SUG:NA
- DESC:CVE-2022-47024 CVE-2023-0288</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-9" date="1675684800">- Type:CVE
- ID:CVE-2023-0433
- SUG:NA
- DESC:CVE-2023-0433</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-10" date="1677067200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:backport upstream patch to fix memory leak</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-11" date="1678276800">- Type:CVE
- ID:CVE-2023-1170 CVE-2023-1175
- SUG:NA
- DESC:CVE-2023-1170 CVE-2023-1175</changelog>
</package>
<package pkgid="01c2a72198206b0df5886251788664164ba583e244e006dd0dab1e02d2b328ad" name="vim" arch="src">
  <version epoch="2" ver="9.0" rel="12.oe2203sp1"/>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-3" date="1669896000">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:disable make check for ebs build</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-4" date="1670328000">- Type:CVE
- ID:CVE-2022-3491 CVE-2022-3520 CVE-2022-3591
- SUG:NA
- DESC:fix CVE-2022-3491 CVE-2022-3520 CVE-2022-3591</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-5" date="1670500800">- Type:CVE
- ID:CVE-2022-4292 CVE-2022-4293
- SUG:NA
- DESC:fix CVE-2022-4292 CVE-2022-4293</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-6" date="1670846400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:remove rpath and runpath of exec files and libraries</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-7" date="1673265600">- Type:CVE
- ID:CVE-2023-0049 CVE-2023-0051 CVE-2023-0054
- SUG:NA
- DESC:CVE-2023-0049 CVE-2023-0051 CVE-2023-0054</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-8" date="1674993600">- Type:CVE
- ID:CVE-2022-47024 CVE-2023-0288
- SUG:NA
- DESC:CVE-2022-47024 CVE-2023-0288</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-9" date="1675684800">- Type:CVE
- ID:CVE-2023-0433
- SUG:NA
- DESC:CVE-2023-0433</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-10" date="1677067200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:backport upstream patch to fix memory leak</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-11" date="1678276800">- Type:CVE
- ID:CVE-2023-1170 CVE-2023-1175
- SUG:NA
- DESC:CVE-2023-1170 CVE-2023-1175</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-12" date="1679054400">- Type:CVE
- ID:CVE-2023-1264
- SUG:NA
- DESC:CVE-2023-1264</changelog>
</package>
<package pkgid="a7f9b1ba614380e9922fc53cf758fb47b2364aa8a808d86e4874033036a448e9" name="vim" arch="src">
  <version epoch="2" ver="9.0" rel="13.oe2203sp1"/>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-4" date="1670328000">- Type:CVE
- ID:CVE-2022-3491 CVE-2022-3520 CVE-2022-3591
- SUG:NA
- DESC:fix CVE-2022-3491 CVE-2022-3520 CVE-2022-3591</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-5" date="1670500800">- Type:CVE
- ID:CVE-2022-4292 CVE-2022-4293
- SUG:NA
- DESC:fix CVE-2022-4292 CVE-2022-4293</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-6" date="1670846400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:remove rpath and runpath of exec files and libraries</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-7" date="1673265600">- Type:CVE
- ID:CVE-2023-0049 CVE-2023-0051 CVE-2023-0054
- SUG:NA
- DESC:CVE-2023-0049 CVE-2023-0051 CVE-2023-0054</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-8" date="1674993600">- Type:CVE
- ID:CVE-2022-47024 CVE-2023-0288
- SUG:NA
- DESC:CVE-2022-47024 CVE-2023-0288</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-9" date="1675684800">- Type:CVE
- ID:CVE-2023-0433
- SUG:NA
- DESC:CVE-2023-0433</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-10" date="1677067200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:backport upstream patch to fix memory leak</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-11" date="1678276800">- Type:CVE
- ID:CVE-2023-1170 CVE-2023-1175
- SUG:NA
- DESC:CVE-2023-1170 CVE-2023-1175</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-12" date="1679054400">- Type:CVE
- ID:CVE-2023-1264
- SUG:NA
- DESC:CVE-2023-1264</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-13" date="1679659200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:vim reads /etc/vimrc at startup</changelog>
</package>
<package pkgid="bf51e53625012a25b0a95864bf04738b3537cda40dfb54caf3ad3326ce2a5231" name="vim" arch="src">
  <version epoch="2" ver="9.0" rel="14.oe2203sp1"/>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-5" date="1670500800">- Type:CVE
- ID:CVE-2022-4292 CVE-2022-4293
- SUG:NA
- DESC:fix CVE-2022-4292 CVE-2022-4293</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-6" date="1670846400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:remove rpath and runpath of exec files and libraries</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-7" date="1673265600">- Type:CVE
- ID:CVE-2023-0049 CVE-2023-0051 CVE-2023-0054
- SUG:NA
- DESC:CVE-2023-0049 CVE-2023-0051 CVE-2023-0054</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-8" date="1674993600">- Type:CVE
- ID:CVE-2022-47024 CVE-2023-0288
- SUG:NA
- DESC:CVE-2022-47024 CVE-2023-0288</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-9" date="1675684800">- Type:CVE
- ID:CVE-2023-0433
- SUG:NA
- DESC:CVE-2023-0433</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-10" date="1677067200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:backport upstream patch to fix memory leak</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-11" date="1678276800">- Type:CVE
- ID:CVE-2023-1170 CVE-2023-1175
- SUG:NA
- DESC:CVE-2023-1170 CVE-2023-1175</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-12" date="1679054400">- Type:CVE
- ID:CVE-2023-1264
- SUG:NA
- DESC:CVE-2023-1264</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-13" date="1679659200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:vim reads /etc/vimrc at startup</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-14" date="1683201600">- Type:CVE
- ID:CVE-2023-2426
- SUG:NA
- DESC:CVE-2023-2426</changelog>
</package>
<package pkgid="05a63028fe7fcd3a9b54dcf254e52182618b25bfea9b14d85348a42959fb8775" name="vim" arch="src">
  <version epoch="2" ver="9.0" rel="15.oe2203sp1"/>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-6" date="1670846400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:remove rpath and runpath of exec files and libraries</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-7" date="1673265600">- Type:CVE
- ID:CVE-2023-0049 CVE-2023-0051 CVE-2023-0054
- SUG:NA
- DESC:CVE-2023-0049 CVE-2023-0051 CVE-2023-0054</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-8" date="1674993600">- Type:CVE
- ID:CVE-2022-47024 CVE-2023-0288
- SUG:NA
- DESC:CVE-2022-47024 CVE-2023-0288</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-9" date="1675684800">- Type:CVE
- ID:CVE-2023-0433
- SUG:NA
- DESC:CVE-2023-0433</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-10" date="1677067200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:backport upstream patch to fix memory leak</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-11" date="1678276800">- Type:CVE
- ID:CVE-2023-1170 CVE-2023-1175
- SUG:NA
- DESC:CVE-2023-1170 CVE-2023-1175</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-12" date="1679054400">- Type:CVE
- ID:CVE-2023-1264
- SUG:NA
- DESC:CVE-2023-1264</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-13" date="1679659200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:vim reads /etc/vimrc at startup</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-14" date="1683201600">- Type:CVE
- ID:CVE-2023-2426
- SUG:NA
- DESC:CVE-2023-2426</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-15" date="1683979200">- Type:CVE
- ID:CVE-2023-2609 CVE-2023-2610
- SUG:NA
- DESC:CVE-2023-2609 CVE-2023-2610</changelog>
</package>
<package pkgid="d19831597830a35e79aff87ed8c6d664a8273040e579da996400914124641d19" name="vim" arch="src">
  <version epoch="2" ver="9.0" rel="17.oe2203sp1"/>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-8" date="1674993600">- Type:CVE
- ID:CVE-2022-47024 CVE-2023-0288
- SUG:NA
- DESC:CVE-2022-47024 CVE-2023-0288</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-9" date="1675684800">- Type:CVE
- ID:CVE-2023-0433
- SUG:NA
- DESC:CVE-2023-0433</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-10" date="1677067200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:backport upstream patch to fix memory leak</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-11" date="1678276800">- Type:CVE
- ID:CVE-2023-1170 CVE-2023-1175
- SUG:NA
- DESC:CVE-2023-1170 CVE-2023-1175</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-12" date="1679054400">- Type:CVE
- ID:CVE-2023-1264
- SUG:NA
- DESC:CVE-2023-1264</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-13" date="1679659200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:vim reads /etc/vimrc at startup</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-14" date="1683201600">- Type:CVE
- ID:CVE-2023-2426
- SUG:NA
- DESC:CVE-2023-2426</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-15" date="1683979200">- Type:CVE
- ID:CVE-2023-2609 CVE-2023-2610
- SUG:NA
- DESC:CVE-2023-2609 CVE-2023-2610</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-16" date="1694088000">- Type:CVE
- ID:CVE-2023-4736 CVE-2023-4733 CVE-2023-4734 CVE-2023-4735
- SUG:NA
- DESC:fix CVE-2023-4736 CVE-2023-4733 CVE-2023-4734 CVE-2023-4735</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-17" date="1694520000">- Type:CVE
- ID:CVE-2023-4738 CVE-2023-4750 CVE-2023-4752 CVE-2023-4781
- SUG:NA
- DESC:fix CVE-2023-4738 CVE-2023-4750 CVE-2023-4752 CVE-2023-4781</changelog>
</package>
<package pkgid="1b6315780b2e8cd68dcd61334c3f34c227e62b4dcc6bf2365e33f2328a5d6d12" name="vim" arch="src">
  <version epoch="2" ver="9.0" rel="18.oe2203sp1"/>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-9" date="1675684800">- Type:CVE
- ID:CVE-2023-0433
- SUG:NA
- DESC:CVE-2023-0433</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-10" date="1677067200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:backport upstream patch to fix memory leak</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-11" date="1678276800">- Type:CVE
- ID:CVE-2023-1170 CVE-2023-1175
- SUG:NA
- DESC:CVE-2023-1170 CVE-2023-1175</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-12" date="1679054400">- Type:CVE
- ID:CVE-2023-1264
- SUG:NA
- DESC:CVE-2023-1264</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-13" date="1679659200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:vim reads /etc/vimrc at startup</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-14" date="1683201600">- Type:CVE
- ID:CVE-2023-2426
- SUG:NA
- DESC:CVE-2023-2426</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-15" date="1683979200">- Type:CVE
- ID:CVE-2023-2609 CVE-2023-2610
- SUG:NA
- DESC:CVE-2023-2609 CVE-2023-2610</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-16" date="1694088000">- Type:CVE
- ID:CVE-2023-4736 CVE-2023-4733 CVE-2023-4734 CVE-2023-4735
- SUG:NA
- DESC:fix CVE-2023-4736 CVE-2023-4733 CVE-2023-4734 CVE-2023-4735</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-17" date="1694520000">- Type:CVE
- ID:CVE-2023-4738 CVE-2023-4750 CVE-2023-4752 CVE-2023-4781
- SUG:NA
- DESC:fix CVE-2023-4738 CVE-2023-4750 CVE-2023-4752 CVE-2023-4781</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-18" date="1696766400">- Type:CVE
- ID:CVE-2023-5344
- SUG:NA
- DESC:fix CVE-2023-5344</changelog>
</package>
<package pkgid="568d88724cbe3f73280b4ae206c155a3100ff82709102fee85248e7bc161a953" name="vim" arch="src">
  <version epoch="2" ver="9.0" rel="19.oe2203sp1"/>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-10" date="1677067200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:backport upstream patch to fix memory leak</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-11" date="1678276800">- Type:CVE
- ID:CVE-2023-1170 CVE-2023-1175
- SUG:NA
- DESC:CVE-2023-1170 CVE-2023-1175</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-12" date="1679054400">- Type:CVE
- ID:CVE-2023-1264
- SUG:NA
- DESC:CVE-2023-1264</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-13" date="1679659200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:vim reads /etc/vimrc at startup</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-14" date="1683201600">- Type:CVE
- ID:CVE-2023-2426
- SUG:NA
- DESC:CVE-2023-2426</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-15" date="1683979200">- Type:CVE
- ID:CVE-2023-2609 CVE-2023-2610
- SUG:NA
- DESC:CVE-2023-2609 CVE-2023-2610</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-16" date="1694088000">- Type:CVE
- ID:CVE-2023-4736 CVE-2023-4733 CVE-2023-4734 CVE-2023-4735
- SUG:NA
- DESC:fix CVE-2023-4736 CVE-2023-4733 CVE-2023-4734 CVE-2023-4735</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-17" date="1694520000">- Type:CVE
- ID:CVE-2023-4738 CVE-2023-4750 CVE-2023-4752 CVE-2023-4781
- SUG:NA
- DESC:fix CVE-2023-4738 CVE-2023-4750 CVE-2023-4752 CVE-2023-4781</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-18" date="1696766400">- Type:CVE
- ID:CVE-2023-5344
- SUG:NA
- DESC:fix CVE-2023-5344</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-19" date="1697457600">- Type:CVE
- ID:CVE-2023-5441 CVE-2023-5535
- SUG:NA
- DESC:fix CVE-2023-5441 CVE-2023-5535</changelog>
</package>
<package pkgid="4ee3520d6846490d20018784695f7bfb6ec70b91f063924d68b28af4a404b7cb" name="vim" arch="src">
  <version epoch="2" ver="9.0" rel="21.oe2203sp1"/>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-12" date="1679054400">- Type:CVE
- ID:CVE-2023-1264
- SUG:NA
- DESC:CVE-2023-1264</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-13" date="1679659200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:vim reads /etc/vimrc at startup</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-14" date="1683201600">- Type:CVE
- ID:CVE-2023-2426
- SUG:NA
- DESC:CVE-2023-2426</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-15" date="1683979200">- Type:CVE
- ID:CVE-2023-2609 CVE-2023-2610
- SUG:NA
- DESC:CVE-2023-2609 CVE-2023-2610</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-16" date="1694088000">- Type:CVE
- ID:CVE-2023-4736 CVE-2023-4733 CVE-2023-4734 CVE-2023-4735
- SUG:NA
- DESC:fix CVE-2023-4736 CVE-2023-4733 CVE-2023-4734 CVE-2023-4735</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-17" date="1694520000">- Type:CVE
- ID:CVE-2023-4738 CVE-2023-4750 CVE-2023-4752 CVE-2023-4781
- SUG:NA
- DESC:fix CVE-2023-4738 CVE-2023-4750 CVE-2023-4752 CVE-2023-4781</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-18" date="1696766400">- Type:CVE
- ID:CVE-2023-5344
- SUG:NA
- DESC:fix CVE-2023-5344</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-19" date="1697457600">- Type:CVE
- ID:CVE-2023-5441 CVE-2023-5535
- SUG:NA
- DESC:fix CVE-2023-5441 CVE-2023-5535</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-20" date="1698840000">- Type:CVE
- ID:CVE-2023-46246
- SUG:NA
- DESC:fix CVE-2023-46246</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-21" date="1699272000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix garbled characters display with keywords of filename</changelog>
</package>
<package pkgid="f45ee3d84242b4ed72e5d6df93d18d9a2772dfde5aa0b4c894143567b8fc59d2" name="vim" arch="src">
  <version epoch="2" ver="9.0" rel="22.oe2203sp1"/>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-13" date="1679659200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:vim reads /etc/vimrc at startup</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-14" date="1683201600">- Type:CVE
- ID:CVE-2023-2426
- SUG:NA
- DESC:CVE-2023-2426</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-15" date="1683979200">- Type:CVE
- ID:CVE-2023-2609 CVE-2023-2610
- SUG:NA
- DESC:CVE-2023-2609 CVE-2023-2610</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-16" date="1694088000">- Type:CVE
- ID:CVE-2023-4736 CVE-2023-4733 CVE-2023-4734 CVE-2023-4735
- SUG:NA
- DESC:fix CVE-2023-4736 CVE-2023-4733 CVE-2023-4734 CVE-2023-4735</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-17" date="1694520000">- Type:CVE
- ID:CVE-2023-4738 CVE-2023-4750 CVE-2023-4752 CVE-2023-4781
- SUG:NA
- DESC:fix CVE-2023-4738 CVE-2023-4750 CVE-2023-4752 CVE-2023-4781</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-18" date="1696766400">- Type:CVE
- ID:CVE-2023-5344
- SUG:NA
- DESC:fix CVE-2023-5344</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-19" date="1697457600">- Type:CVE
- ID:CVE-2023-5441 CVE-2023-5535
- SUG:NA
- DESC:fix CVE-2023-5441 CVE-2023-5535</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-20" date="1698840000">- Type:CVE
- ID:CVE-2023-46246
- SUG:NA
- DESC:fix CVE-2023-46246</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-21" date="1699272000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix garbled characters display with keywords of filename</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-22" date="1700654400">- Type:CVE
- ID:CVE-2023-48231 CVE-2023-48233 CVE-2023-48234 CVE-2023-48235 CVE-2023-48236 CVE-2023-48237
- SUG:NA
- DESC:fix CVE-2023-48231 CVE-2023-48233 CVE-2023-48234 CVE-2023-48235 CVE-2023-48236 CVE-2023-48237</changelog>
</package>
<package pkgid="3c422976b583f6d9984650194c53611cc5fb7832f52ad65bf6365f66b5c7446f" name="vim" arch="src">
  <version epoch="2" ver="9.0" rel="23.oe2203sp1"/>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-14" date="1683201600">- Type:CVE
- ID:CVE-2023-2426
- SUG:NA
- DESC:CVE-2023-2426</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-15" date="1683979200">- Type:CVE
- ID:CVE-2023-2609 CVE-2023-2610
- SUG:NA
- DESC:CVE-2023-2609 CVE-2023-2610</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-16" date="1694088000">- Type:CVE
- ID:CVE-2023-4736 CVE-2023-4733 CVE-2023-4734 CVE-2023-4735
- SUG:NA
- DESC:fix CVE-2023-4736 CVE-2023-4733 CVE-2023-4734 CVE-2023-4735</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-17" date="1694520000">- Type:CVE
- ID:CVE-2023-4738 CVE-2023-4750 CVE-2023-4752 CVE-2023-4781
- SUG:NA
- DESC:fix CVE-2023-4738 CVE-2023-4750 CVE-2023-4752 CVE-2023-4781</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-18" date="1696766400">- Type:CVE
- ID:CVE-2023-5344
- SUG:NA
- DESC:fix CVE-2023-5344</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-19" date="1697457600">- Type:CVE
- ID:CVE-2023-5441 CVE-2023-5535
- SUG:NA
- DESC:fix CVE-2023-5441 CVE-2023-5535</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-20" date="1698840000">- Type:CVE
- ID:CVE-2023-46246
- SUG:NA
- DESC:fix CVE-2023-46246</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-21" date="1699272000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix garbled characters display with keywords of filename</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-22" date="1700654400">- Type:CVE
- ID:CVE-2023-48231 CVE-2023-48233 CVE-2023-48234 CVE-2023-48235 CVE-2023-48236 CVE-2023-48237
- SUG:NA
- DESC:fix CVE-2023-48231 CVE-2023-48233 CVE-2023-48234 CVE-2023-48235 CVE-2023-48236 CVE-2023-48237</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-23" date="1701172800">- Type:CVE
- ID:CVE-2023-48706
- SUG:NA
- DESC:fix CVE-2023-48706</changelog>
</package>
<package pkgid="37fc24dd90ede9a210e483fc027e2d190b8a0bcc70912bf255c9cf48cc640bc4" name="vim" arch="src">
  <version epoch="2" ver="9.0" rel="24.oe2203sp1"/>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-15" date="1683979200">- Type:CVE
- ID:CVE-2023-2609 CVE-2023-2610
- SUG:NA
- DESC:CVE-2023-2609 CVE-2023-2610</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-16" date="1694088000">- Type:CVE
- ID:CVE-2023-4736 CVE-2023-4733 CVE-2023-4734 CVE-2023-4735
- SUG:NA
- DESC:fix CVE-2023-4736 CVE-2023-4733 CVE-2023-4734 CVE-2023-4735</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-17" date="1694520000">- Type:CVE
- ID:CVE-2023-4738 CVE-2023-4750 CVE-2023-4752 CVE-2023-4781
- SUG:NA
- DESC:fix CVE-2023-4738 CVE-2023-4750 CVE-2023-4752 CVE-2023-4781</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-18" date="1696766400">- Type:CVE
- ID:CVE-2023-5344
- SUG:NA
- DESC:fix CVE-2023-5344</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-19" date="1697457600">- Type:CVE
- ID:CVE-2023-5441 CVE-2023-5535
- SUG:NA
- DESC:fix CVE-2023-5441 CVE-2023-5535</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-20" date="1698840000">- Type:CVE
- ID:CVE-2023-46246
- SUG:NA
- DESC:fix CVE-2023-46246</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-21" date="1699272000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix garbled characters display with keywords of filename</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-22" date="1700654400">- Type:CVE
- ID:CVE-2023-48231 CVE-2023-48233 CVE-2023-48234 CVE-2023-48235 CVE-2023-48236 CVE-2023-48237
- SUG:NA
- DESC:fix CVE-2023-48231 CVE-2023-48233 CVE-2023-48234 CVE-2023-48235 CVE-2023-48236 CVE-2023-48237</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-23" date="1701172800">- Type:CVE
- ID:CVE-2023-48706
- SUG:NA
- DESC:fix CVE-2023-48706</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-24" date="1722945600">- Type:CVE
- ID:CVE-2024-41957 CVE-2024-41965
- SUG:NA
- DESC:fix CVE-2024-41957 CVE-2024-41965</changelog>
</package>
<package pkgid="24c4ab5a7b6ae6762bcdce96c298ce787d9380c19033ea6e31b32e7704743501" name="vim" arch="src">
  <version epoch="2" ver="9.0" rel="25.oe2203sp1"/>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-16" date="1694088000">- Type:CVE
- ID:CVE-2023-4736 CVE-2023-4733 CVE-2023-4734 CVE-2023-4735
- SUG:NA
- DESC:fix CVE-2023-4736 CVE-2023-4733 CVE-2023-4734 CVE-2023-4735</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-17" date="1694520000">- Type:CVE
- ID:CVE-2023-4738 CVE-2023-4750 CVE-2023-4752 CVE-2023-4781
- SUG:NA
- DESC:fix CVE-2023-4738 CVE-2023-4750 CVE-2023-4752 CVE-2023-4781</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-18" date="1696766400">- Type:CVE
- ID:CVE-2023-5344
- SUG:NA
- DESC:fix CVE-2023-5344</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-19" date="1697457600">- Type:CVE
- ID:CVE-2023-5441 CVE-2023-5535
- SUG:NA
- DESC:fix CVE-2023-5441 CVE-2023-5535</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-20" date="1698840000">- Type:CVE
- ID:CVE-2023-46246
- SUG:NA
- DESC:fix CVE-2023-46246</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-21" date="1699272000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix garbled characters display with keywords of filename</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-22" date="1700654400">- Type:CVE
- ID:CVE-2023-48231 CVE-2023-48233 CVE-2023-48234 CVE-2023-48235 CVE-2023-48236 CVE-2023-48237
- SUG:NA
- DESC:fix CVE-2023-48231 CVE-2023-48233 CVE-2023-48234 CVE-2023-48235 CVE-2023-48236 CVE-2023-48237</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-23" date="1701172800">- Type:CVE
- ID:CVE-2023-48706
- SUG:NA
- DESC:fix CVE-2023-48706</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-24" date="1722945600">- Type:CVE
- ID:CVE-2024-41957 CVE-2024-41965
- SUG:NA
- DESC:fix CVE-2024-41957 CVE-2024-41965</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 2:9.0-25" date="1723809600">- Type:CVE
- ID:CVE-2024-43374
- SUG:NA
- DESC:fix CVE-2024-43374</changelog>
</package>
<package pkgid="4af7b6c32355155b4a7b683e92eacc8fc85b69e27444d0190cecc49e354c1e77" name="vim" arch="src">
  <version epoch="2" ver="9.0" rel="27.oe2203sp1"/>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-18" date="1696766400">- Type:CVE
- ID:CVE-2023-5344
- SUG:NA
- DESC:fix CVE-2023-5344</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-19" date="1697457600">- Type:CVE
- ID:CVE-2023-5441 CVE-2023-5535
- SUG:NA
- DESC:fix CVE-2023-5441 CVE-2023-5535</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-20" date="1698840000">- Type:CVE
- ID:CVE-2023-46246
- SUG:NA
- DESC:fix CVE-2023-46246</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-21" date="1699272000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix garbled characters display with keywords of filename</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-22" date="1700654400">- Type:CVE
- ID:CVE-2023-48231 CVE-2023-48233 CVE-2023-48234 CVE-2023-48235 CVE-2023-48236 CVE-2023-48237
- SUG:NA
- DESC:fix CVE-2023-48231 CVE-2023-48233 CVE-2023-48234 CVE-2023-48235 CVE-2023-48236 CVE-2023-48237</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-23" date="1701172800">- Type:CVE
- ID:CVE-2023-48706
- SUG:NA
- DESC:fix CVE-2023-48706</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-24" date="1722945600">- Type:CVE
- ID:CVE-2024-41957 CVE-2024-41965
- SUG:NA
- DESC:fix CVE-2024-41957 CVE-2024-41965</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 2:9.0-25" date="1723809600">- Type:CVE
- ID:CVE-2024-43374
- SUG:NA
- DESC:fix CVE-2024-43374</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-26" date="1724241600">- Type:enhacement
- ID:NA
- SUG:NA
- DESC:support newly introduced rpm tags</changelog>
  <changelog author="wangjiang &lt;app@cameyan.com&gt; - 2:9.0-27" date="1724932800">- Type:CVE
- ID:CVE-2024-43802
- SUG:NA
- DESC:fix CVE-2024-43802</changelog>
</package>
<package pkgid="716b791b681b6dd4d0f0317880b5756ddf6ef4b4279a349567c8f459c9598fa1" name="vim" arch="src">
  <version epoch="2" ver="9.0" rel="7.oe2203sp1"/>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:8.2-70" date="1665748800">- Type:CVE
- ID:CVE-2022-3297
- SUG:NA
- DESC:fix CVE-2022-3297</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 2:8.2-71" date="1666008000">- Type:CVE
- ID:CVE-2022-3324
- SUG:NA
- DESC:fix CVE-2022-3324</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:8.2-72" date="1667217600">- Type:CVE
- ID:CVE-2022-3705
- SUG:NA
- DESC:fix CVE-2022-3705</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-1" date="1667476800">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:upgrade version to 9.0</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-2" date="1669636800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix CVE-2022-4141 and delete irrelevant log file</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-3" date="1669896000">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:disable make check for ebs build</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-4" date="1670328000">- Type:CVE
- ID:CVE-2022-3491 CVE-2022-3520 CVE-2022-3591
- SUG:NA
- DESC:fix CVE-2022-3491 CVE-2022-3520 CVE-2022-3591</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-5" date="1670500800">- Type:CVE
- ID:CVE-2022-4292 CVE-2022-4293
- SUG:NA
- DESC:fix CVE-2022-4292 CVE-2022-4293</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-6" date="1670846400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:remove rpath and runpath of exec files and libraries</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-7" date="1673265600">- Type:CVE
- ID:CVE-2023-0049 CVE-2023-0051 CVE-2023-0054
- SUG:NA
- DESC:CVE-2023-0049 CVE-2023-0051 CVE-2023-0054</changelog>
</package>
<package pkgid="5f667e5b3fd8318c0df3dc755d14b2e4fcd45fcb1b90056dd77cf8ff8a02abff" name="vim" arch="src">
  <version epoch="2" ver="9.0" rel="8.oe2203sp1"/>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 2:8.2-71" date="1666008000">- Type:CVE
- ID:CVE-2022-3324
- SUG:NA
- DESC:fix CVE-2022-3324</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:8.2-72" date="1667217600">- Type:CVE
- ID:CVE-2022-3705
- SUG:NA
- DESC:fix CVE-2022-3705</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-1" date="1667476800">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:upgrade version to 9.0</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-2" date="1669636800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix CVE-2022-4141 and delete irrelevant log file</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-3" date="1669896000">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:disable make check for ebs build</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-4" date="1670328000">- Type:CVE
- ID:CVE-2022-3491 CVE-2022-3520 CVE-2022-3591
- SUG:NA
- DESC:fix CVE-2022-3491 CVE-2022-3520 CVE-2022-3591</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-5" date="1670500800">- Type:CVE
- ID:CVE-2022-4292 CVE-2022-4293
- SUG:NA
- DESC:fix CVE-2022-4292 CVE-2022-4293</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-6" date="1670846400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:remove rpath and runpath of exec files and libraries</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-7" date="1673265600">- Type:CVE
- ID:CVE-2023-0049 CVE-2023-0051 CVE-2023-0054
- SUG:NA
- DESC:CVE-2023-0049 CVE-2023-0051 CVE-2023-0054</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-8" date="1674993600">- Type:CVE
- ID:CVE-2022-47024 CVE-2023-0288
- SUG:NA
- DESC:CVE-2022-47024 CVE-2023-0288</changelog>
</package>
<package pkgid="3418b8c2710e255f5d5e8334c6df5a5586103d8d2f95413fa8cc55d6aeed30c1" name="vim" arch="src">
  <version epoch="2" ver="9.0" rel="9.oe2203sp1"/>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:8.2-72" date="1667217600">- Type:CVE
- ID:CVE-2022-3705
- SUG:NA
- DESC:fix CVE-2022-3705</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-1" date="1667476800">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:upgrade version to 9.0</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-2" date="1669636800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix CVE-2022-4141 and delete irrelevant log file</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-3" date="1669896000">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:disable make check for ebs build</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-4" date="1670328000">- Type:CVE
- ID:CVE-2022-3491 CVE-2022-3520 CVE-2022-3591
- SUG:NA
- DESC:fix CVE-2022-3491 CVE-2022-3520 CVE-2022-3591</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-5" date="1670500800">- Type:CVE
- ID:CVE-2022-4292 CVE-2022-4293
- SUG:NA
- DESC:fix CVE-2022-4292 CVE-2022-4293</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-6" date="1670846400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:remove rpath and runpath of exec files and libraries</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-7" date="1673265600">- Type:CVE
- ID:CVE-2023-0049 CVE-2023-0051 CVE-2023-0054
- SUG:NA
- DESC:CVE-2023-0049 CVE-2023-0051 CVE-2023-0054</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-8" date="1674993600">- Type:CVE
- ID:CVE-2022-47024 CVE-2023-0288
- SUG:NA
- DESC:CVE-2022-47024 CVE-2023-0288</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-9" date="1675684800">- Type:CVE
- ID:CVE-2023-0433
- SUG:NA
- DESC:CVE-2023-0433</changelog>
</package>
<package pkgid="feacacde6b6876677e7f9013eab2ea1ab3e484f4300e1312be868e75c4d4d68e" name="vte291" arch="src">
  <version epoch="0" ver="0.62.3" rel="2.oe2203sp1"/>
</package>
<package pkgid="f4a274df3dbb29e836f37ec84939ca553a01137e53146f1d92db6c68a5219438" name="webkit2gtk3" arch="src">
  <version epoch="0" ver="2.36.3" rel="4.oe2203sp1"/>
  <changelog author="wangkerong&lt;wangkerong@huawei.com&gt; - 2.32.1-1" date="1624276800">- upgrade to 2.32.1</changelog>
  <changelog author="wangkerong&lt;wangkerong@huawei.com&gt; - 2.32.1-2" date="1627560000">- change xdg-desktop-protal-gts dependences</changelog>
  <changelog author="zhanzhimin&lt;zhanzhimin@huawei.com&gt; - 2.32.4-1" date="1634904000">- upgrade to 2.32.4</changelog>
  <changelog author="liuyumeng&lt;liuyumeng5@huawei.com&gt; - 2.32.4-2" date="1636027200">- fix CVE-2021-42762</changelog>
  <changelog author="houjinchang&lt;houjinchang@huawei.com&gt; - 2.32.4-3" date="1654603200">- fix CVE-2022-30293 and CVE-2022-30294</changelog>
  <changelog author="zhujunhao&lt;zhujunhao11@huawei.com&gt; - 2.32.4-4" date="1654862400">- add wayland-porotocols-devel buildrequires</changelog>
  <changelog author="lin zhang &lt;lin.zhang@turbolinux.com.cn&gt; 2.36.3-1" date="1655121600">- Update to 2.36.3</changelog>
  <changelog author="huajingyun &lt;huajingyun@loongson.cn&gt; 2.36.3-2" date="1668427200">- Add support loongarch</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 2.36.3-3" date="1669723200">- Add sw64 architecture</changelog>
  <changelog author="zhangpan&lt;zhangpan103@h-partners.com&gt; - 2.36.3-4" date="1685361600">- fix CVE-2023-28204 CVE-2023-32373 CVE-2023-32409</changelog>
</package>
<package pkgid="66f2fe173a7424cff16c37775a3cd5feddbb680d8790c9ca7bd6eed8d614edac" name="webkit2gtk3" arch="src">
  <version epoch="0" ver="2.36.3" rel="5.oe2203sp1"/>
  <changelog author="houjinchang&lt;houjinchang@huawei.com&gt; - 2.32.4-3" date="1654603200">- fix CVE-2022-30293 and CVE-2022-30294</changelog>
  <changelog author="zhujunhao&lt;zhujunhao11@huawei.com&gt; - 2.32.4-4" date="1654862400">- add wayland-porotocols-devel buildrequires</changelog>
  <changelog author="lin zhang &lt;lin.zhang@turbolinux.com.cn&gt; 2.36.3-1" date="1655121600">- Update to 2.36.3</changelog>
  <changelog author="huajingyun &lt;huajingyun@loongson.cn&gt; 2.36.3-2" date="1668427200">- Add support loongarch</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 2.36.3-3" date="1669723200">- Add sw64 architecture</changelog>
  <changelog author="zhangpan&lt;zhangpan103@h-partners.com&gt; - 2.36.3-4" date="1685361600">- fix CVE-2023-28204 CVE-2023-32373 CVE-2023-32409</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 2.36.3-5" date="1717156800">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:add build option PIE</changelog>
</package>
<package pkgid="53fd3f58704cea3f437461951620aee5006e9a9403f1dcfa47915d31513a4a48" name="webkit2gtk3" arch="src">
  <version epoch="0" ver="2.36.3" rel="7.oe2203sp1"/>
  <changelog author="huajingyun &lt;huajingyun@loongson.cn&gt; 2.36.3-2" date="1668427200">- Add support loongarch</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 2.36.3-3" date="1669723200">- Add sw64 architecture</changelog>
  <changelog author="zhangpan&lt;zhangpan103@h-partners.com&gt; - 2.36.3-4" date="1685361600">- fix CVE-2023-28204 CVE-2023-32373 CVE-2023-32409</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 2.36.3-5" date="1717156800">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:add build option PIE</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@kylinsec.com.cn&gt; - 2.36.3-6" date="1718107200">- Modfiy loongarch64 and sw_64 support use all arch</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 2.36.3-7" date="1724328000">- fix CVE-2024-4558 CVE-2024-40779 CVE-2024-40780</changelog>
</package>
<package pkgid="e403acf8f3135180db0862010637a5bce4da2e4ff78d42a213b2f4ba6f56de0e" name="wget" arch="src">
  <version epoch="0" ver="1.21.2" rel="5.oe2203sp1"/>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.21.2-2" date="1666440000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix find_cell(): wget killed by SIGSEGV</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 1.21.2-3" date="1669896000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:disable DT test</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 1.21.2-4" date="1678363200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:skip some unstable tests and enable DT test</changelog>
  <changelog author="xuchenchen &lt;xuchenchen@kylinos.cn&gt; -1.21.2-5" date="1718539200">- Type:CVES
- ID:NA
- SUG:NA
- DESC:backport CVE-2024-38428</changelog>
</package>
<package pkgid="cfba1137a3fe52f4726076256462fa51f4d8c42fa08ab60d215739aedfd86deb" name="wireshark" arch="src">
  <version epoch="1" ver="3.6.11" rel="1.oe2203sp1"/>
  <changelog author="wangxiao &lt;wangxiao65@huawei.com&gt; - 2.6.2-18" date="1614254400">- Fix CVE-2019-13619 CVE-2019-19553 CVE-2020-9428 CVE-2020-9431</changelog>
  <changelog author="lingsheng &lt;lingsheng@huawei.com&gt; - 2.6.2-19" date="1627387200">- Move headers outside extern C to fix build fail</changelog>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 2.6.2-20" date="1627387201">- fix CVE-2019-12295</changelog>
  <changelog author="Chen Chen &lt;chen_aka_jan@163.com&gt; - 3.6.0-1" date="1640865600">- Update to 3.6.0</changelog>
  <changelog author="Chen Chen &lt;chen_aka_jan@163.com&gt; - 3.6.0-2" date="1642593600">- fix update error for add wireshark-cli Provides&amp;Obsoletes</changelog>
  <changelog author="xu_ping &lt;xuping33n@huawei.com&gt; - 3.6.0-3" date="1644926400">- fix install warning group wireshark does not exist -using root</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 3.6.2-1" date="1646827200">- Update to 3.6.2 for fix CVE-2022-0581 CVE-2022-0582 CVE-2022-0583 CVE-2022-0585 CVE-2022-0586</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 1:3.6.3-1" date="1666785600">- Update to 3.6.3</changelog>
  <changelog author="liyuxiang&lt;liyuxiang@ncti-gba.cn&gt; - 1:3.6.3-2" date="1667995200">- fix CVE-2022-3725</changelog>
  <changelog author="liyuxiang&lt;liyuxiang@ncti-gba.cn&gt; - 1:3.6.11-1" date="1676376000">- Update to 3.6.11</changelog>
</package>
<package pkgid="81ce6cca894faf03e05d012bd19bfb1e08861b5a397de5bce79b23d352412eb3" name="wireshark" arch="src">
  <version epoch="1" ver="3.6.11" rel="2.oe2203sp1"/>
  <changelog author="lingsheng &lt;lingsheng@huawei.com&gt; - 2.6.2-19" date="1627387200">- Move headers outside extern C to fix build fail</changelog>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 2.6.2-20" date="1627387201">- fix CVE-2019-12295</changelog>
  <changelog author="Chen Chen &lt;chen_aka_jan@163.com&gt; - 3.6.0-1" date="1640865600">- Update to 3.6.0</changelog>
  <changelog author="Chen Chen &lt;chen_aka_jan@163.com&gt; - 3.6.0-2" date="1642593600">- fix update error for add wireshark-cli Provides&amp;Obsoletes</changelog>
  <changelog author="xu_ping &lt;xuping33n@huawei.com&gt; - 3.6.0-3" date="1644926400">- fix install warning group wireshark does not exist -using root</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 3.6.2-1" date="1646827200">- Update to 3.6.2 for fix CVE-2022-0581 CVE-2022-0582 CVE-2022-0583 CVE-2022-0585 CVE-2022-0586</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 1:3.6.3-1" date="1666785600">- Update to 3.6.3</changelog>
  <changelog author="liyuxiang&lt;liyuxiang@ncti-gba.cn&gt; - 1:3.6.3-2" date="1667995200">- fix CVE-2022-3725</changelog>
  <changelog author="liyuxiang&lt;liyuxiang@ncti-gba.cn&gt; - 1:3.6.11-1" date="1676376000">- Update to 3.6.11</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:3.6.11-2" date="1679918400">- Fix CVE-2023-1161</changelog>
</package>
<package pkgid="feba916f09f9ae4814b6cd499eb855a2036e9b8c7be8e549a522be620c355ed3" name="wireshark" arch="src">
  <version epoch="1" ver="3.6.11" rel="3.oe2203sp1"/>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 2.6.2-20" date="1627387200">- fix CVE-2019-12295</changelog>
  <changelog author="Chen Chen &lt;chen_aka_jan@163.com&gt; - 3.6.0-1" date="1640865600">- Update to 3.6.0</changelog>
  <changelog author="Chen Chen &lt;chen_aka_jan@163.com&gt; - 3.6.0-2" date="1642593600">- fix update error for add wireshark-cli Provides&amp;Obsoletes</changelog>
  <changelog author="xu_ping &lt;xuping33n@huawei.com&gt; - 3.6.0-3" date="1644926400">- fix install warning group wireshark does not exist -using root</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 3.6.2-1" date="1646827200">- Update to 3.6.2 for fix CVE-2022-0581 CVE-2022-0582 CVE-2022-0583 CVE-2022-0585 CVE-2022-0586</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 1:3.6.3-1" date="1666785600">- Update to 3.6.3</changelog>
  <changelog author="liyuxiang&lt;liyuxiang@ncti-gba.cn&gt; - 1:3.6.3-2" date="1667995200">- fix CVE-2022-3725</changelog>
  <changelog author="liyuxiang&lt;liyuxiang@ncti-gba.cn&gt; - 1:3.6.11-1" date="1676376000">- Update to 3.6.11</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:3.6.11-2" date="1679918400">- Fix CVE-2023-1161</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1:3.6.11-3" date="1682337600">- Fix CVE-2023-1992,CVE-2023-1993 and CVE-2023-1994</changelog>
</package>
<package pkgid="3124e3a1cbf8e9edb5d4c72dd97a61fb0c69e3483df0563657503eb673f9cc5d" name="wireshark" arch="src">
  <version epoch="1" ver="3.6.11" rel="4.oe2203sp1"/>
  <changelog author="Chen Chen &lt;chen_aka_jan@163.com&gt; - 3.6.0-1" date="1640865600">- Update to 3.6.0</changelog>
  <changelog author="Chen Chen &lt;chen_aka_jan@163.com&gt; - 3.6.0-2" date="1642593600">- fix update error for add wireshark-cli Provides&amp;Obsoletes</changelog>
  <changelog author="xu_ping &lt;xuping33n@huawei.com&gt; - 3.6.0-3" date="1644926400">- fix install warning group wireshark does not exist -using root</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 3.6.2-1" date="1646827200">- Update to 3.6.2 for fix CVE-2022-0581 CVE-2022-0582 CVE-2022-0583 CVE-2022-0585 CVE-2022-0586</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 1:3.6.3-1" date="1666785600">- Update to 3.6.3</changelog>
  <changelog author="liyuxiang&lt;liyuxiang@ncti-gba.cn&gt; - 1:3.6.3-2" date="1667995200">- fix CVE-2022-3725</changelog>
  <changelog author="liyuxiang&lt;liyuxiang@ncti-gba.cn&gt; - 1:3.6.11-1" date="1676376000">- Update to 3.6.11</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:3.6.11-2" date="1679918400">- Fix CVE-2023-1161</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1:3.6.11-3" date="1682337600">- Fix CVE-2023-1992,CVE-2023-1993 and CVE-2023-1994</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1:3.6.11-4" date="1685448000">- Fix CVE-2023-0668,CVE-2023-2855,CVE-2023-2856,CVE-2023-2857,CVE-2023-2858 and CVE-2023-2879</changelog>
</package>
<package pkgid="cbbb926a40c5d3c0a11731eb77993bd8b74bf662752a0fed5ff63ed103ea22a9" name="wireshark" arch="src">
  <version epoch="1" ver="3.6.14" rel="1.oe2203sp1"/>
  <changelog author="Chen Chen &lt;chen_aka_jan@163.com&gt; - 3.6.0-2" date="1642593600">- fix update error for add wireshark-cli Provides&amp;Obsoletes</changelog>
  <changelog author="xu_ping &lt;xuping33n@huawei.com&gt; - 3.6.0-3" date="1644926400">- fix install warning group wireshark does not exist -using root</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 3.6.2-1" date="1646827200">- Update to 3.6.2 for fix CVE-2022-0581 CVE-2022-0582 CVE-2022-0583 CVE-2022-0585 CVE-2022-0586</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 1:3.6.3-1" date="1666785600">- Update to 3.6.3</changelog>
  <changelog author="liyuxiang&lt;liyuxiang@ncti-gba.cn&gt; - 1:3.6.3-2" date="1667995200">- fix CVE-2022-3725</changelog>
  <changelog author="liyuxiang&lt;liyuxiang@ncti-gba.cn&gt; - 1:3.6.11-1" date="1676376000">- Update to 3.6.11</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:3.6.11-2" date="1679918400">- Fix CVE-2023-1161</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1:3.6.11-3" date="1682337600">- Fix CVE-2023-1992,CVE-2023-1993 and CVE-2023-1994</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1:3.6.11-4" date="1685448000">- Fix CVE-2023-0668,CVE-2023-2855,CVE-2023-2856,CVE-2023-2857,CVE-2023-2858 and CVE-2023-2879</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:3.6.14-1" date="1686830400">- Update to 3.6.14 for fix CVE-2023-0667,CVE-2023-2952</changelog>
</package>
<package pkgid="3151d42757bc793a94425a642553a570c766b650525e0b3cffda7a1b3f2530de" name="wireshark" arch="src">
  <version epoch="1" ver="3.6.14" rel="2.oe2203sp1"/>
  <changelog author="xu_ping &lt;xuping33n@huawei.com&gt; - 3.6.0-3" date="1644926400">- fix install warning group wireshark does not exist -using root</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 3.6.2-1" date="1646827200">- Update to 3.6.2 for fix CVE-2022-0581 CVE-2022-0582 CVE-2022-0583 CVE-2022-0585 CVE-2022-0586</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 1:3.6.3-1" date="1666785600">- Update to 3.6.3</changelog>
  <changelog author="liyuxiang&lt;liyuxiang@ncti-gba.cn&gt; - 1:3.6.3-2" date="1667995200">- fix CVE-2022-3725</changelog>
  <changelog author="liyuxiang&lt;liyuxiang@ncti-gba.cn&gt; - 1:3.6.11-1" date="1676376000">- Update to 3.6.11</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:3.6.11-2" date="1679918400">- Fix CVE-2023-1161</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1:3.6.11-3" date="1682337600">- Fix CVE-2023-1992,CVE-2023-1993 and CVE-2023-1994</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1:3.6.11-4" date="1685448000">- Fix CVE-2023-0668,CVE-2023-2855,CVE-2023-2856,CVE-2023-2857,CVE-2023-2858 and CVE-2023-2879</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:3.6.14-1" date="1686830400">- Update to 3.6.14 for fix CVE-2023-0667,CVE-2023-2952</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 1:3.6.14-2" date="1690459200">- Fix CVE-2023-3648</changelog>
</package>
<package pkgid="0cd5145dd1f6fd552bbfd5884f181c85e2735dbadd1789a659705265006f1985" name="wireshark" arch="src">
  <version epoch="1" ver="3.6.14" rel="3.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 3.6.2-1" date="1646827200">- Update to 3.6.2 for fix CVE-2022-0581 CVE-2022-0582 CVE-2022-0583 CVE-2022-0585 CVE-2022-0586</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 1:3.6.3-1" date="1666785600">- Update to 3.6.3</changelog>
  <changelog author="liyuxiang&lt;liyuxiang@ncti-gba.cn&gt; - 1:3.6.3-2" date="1667995200">- fix CVE-2022-3725</changelog>
  <changelog author="liyuxiang&lt;liyuxiang@ncti-gba.cn&gt; - 1:3.6.11-1" date="1676376000">- Update to 3.6.11</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:3.6.11-2" date="1679918400">- Fix CVE-2023-1161</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1:3.6.11-3" date="1682337600">- Fix CVE-2023-1992,CVE-2023-1993 and CVE-2023-1994</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1:3.6.11-4" date="1685448000">- Fix CVE-2023-0668,CVE-2023-2855,CVE-2023-2856,CVE-2023-2857,CVE-2023-2858 and CVE-2023-2879</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:3.6.14-1" date="1686830400">- Update to 3.6.14 for fix CVE-2023-0667,CVE-2023-2952</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 1:3.6.14-2" date="1690459200">- Fix CVE-2023-3648</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:3.6.14-3" date="1694001600">- Fix CVE-2023-3649,CVE-2023-2906,CVE-2023-4511,CVE-2023-4513</changelog>
</package>
<package pkgid="0ba395db2771f8c2a18fa144e596a5d107f79fc49af030e4eee346da1039cd9b" name="wireshark" arch="src">
  <version epoch="1" ver="3.6.14" rel="4.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 1:3.6.3-1" date="1666785600">- Update to 3.6.3</changelog>
  <changelog author="liyuxiang&lt;liyuxiang@ncti-gba.cn&gt; - 1:3.6.3-2" date="1667995200">- fix CVE-2022-3725</changelog>
  <changelog author="liyuxiang&lt;liyuxiang@ncti-gba.cn&gt; - 1:3.6.11-1" date="1676376000">- Update to 3.6.11</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:3.6.11-2" date="1679918400">- Fix CVE-2023-1161</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1:3.6.11-3" date="1682337600">- Fix CVE-2023-1992,CVE-2023-1993 and CVE-2023-1994</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1:3.6.11-4" date="1685448000">- Fix CVE-2023-0668,CVE-2023-2855,CVE-2023-2856,CVE-2023-2857,CVE-2023-2858 and CVE-2023-2879</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:3.6.14-1" date="1686830400">- Update to 3.6.14 for fix CVE-2023-0667,CVE-2023-2952</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 1:3.6.14-2" date="1690459200">- Fix CVE-2023-3648</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:3.6.14-3" date="1694001600">- Fix CVE-2023-3649,CVE-2023-2906,CVE-2023-4511,CVE-2023-4513</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:3.6.14-4" date="1696680000">- Fix CVE-2023-5371</changelog>
</package>
<package pkgid="b6ec9e42cd70299da74bd32346d542dec2aac42030494118ba4e8cfbcf2c85de" name="wireshark" arch="src">
  <version epoch="1" ver="3.6.14" rel="5.oe2203sp1"/>
  <changelog author="liyuxiang&lt;liyuxiang@ncti-gba.cn&gt; - 1:3.6.3-2" date="1667995200">- fix CVE-2022-3725</changelog>
  <changelog author="liyuxiang&lt;liyuxiang@ncti-gba.cn&gt; - 1:3.6.11-1" date="1676376000">- Update to 3.6.11</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:3.6.11-2" date="1679918400">- Fix CVE-2023-1161</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1:3.6.11-3" date="1682337600">- Fix CVE-2023-1992,CVE-2023-1993 and CVE-2023-1994</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1:3.6.11-4" date="1685448000">- Fix CVE-2023-0668,CVE-2023-2855,CVE-2023-2856,CVE-2023-2857,CVE-2023-2858 and CVE-2023-2879</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:3.6.14-1" date="1686830400">- Update to 3.6.14 for fix CVE-2023-0667,CVE-2023-2952</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 1:3.6.14-2" date="1690459200">- Fix CVE-2023-3648</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:3.6.14-3" date="1694001600">- Fix CVE-2023-3649,CVE-2023-2906,CVE-2023-4511,CVE-2023-4513</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:3.6.14-4" date="1696680000">- Fix CVE-2023-5371</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1:3.6.14-5" date="1700568000">- Fix CVE-2023-6175</changelog>
</package>
<package pkgid="621e1c0a101d8213acfe878dde82455a40fe2af91730280c929f40b2b94d29e3" name="wireshark" arch="src">
  <version epoch="1" ver="3.6.14" rel="6.oe2203sp1"/>
  <changelog author="liyuxiang&lt;liyuxiang@ncti-gba.cn&gt; - 1:3.6.11-1" date="1676376000">- Update to 3.6.11</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:3.6.11-2" date="1679918400">- Fix CVE-2023-1161</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1:3.6.11-3" date="1682337600">- Fix CVE-2023-1992,CVE-2023-1993 and CVE-2023-1994</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1:3.6.11-4" date="1685448000">- Fix CVE-2023-0668,CVE-2023-2855,CVE-2023-2856,CVE-2023-2857,CVE-2023-2858 and CVE-2023-2879</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:3.6.14-1" date="1686830400">- Update to 3.6.14 for fix CVE-2023-0667,CVE-2023-2952</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 1:3.6.14-2" date="1690459200">- Fix CVE-2023-3648</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:3.6.14-3" date="1694001600">- Fix CVE-2023-3649,CVE-2023-2906,CVE-2023-4511,CVE-2023-4513</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:3.6.14-4" date="1696680000">- Fix CVE-2023-5371</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1:3.6.14-5" date="1700568000">- Fix CVE-2023-6175</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:3.6.14-6" date="1704369600">- Fix CVE-2024-0208,CVE-2024-0209</changelog>
</package>
<package pkgid="5d6620a2d2b001e1ea6563c59d6e20b02905d1180acb662c9fc72603d7a53216" name="wireshark" arch="src">
  <version epoch="1" ver="3.6.14" rel="7.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:3.6.11-2" date="1679918400">- Fix CVE-2023-1161</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1:3.6.11-3" date="1682337600">- Fix CVE-2023-1992,CVE-2023-1993 and CVE-2023-1994</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1:3.6.11-4" date="1685448000">- Fix CVE-2023-0668,CVE-2023-2855,CVE-2023-2856,CVE-2023-2857,CVE-2023-2858 and CVE-2023-2879</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:3.6.14-1" date="1686830400">- Update to 3.6.14 for fix CVE-2023-0667,CVE-2023-2952</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 1:3.6.14-2" date="1690459200">- Fix CVE-2023-3648</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:3.6.14-3" date="1694001600">- Fix CVE-2023-3649,CVE-2023-2906,CVE-2023-4511,CVE-2023-4513</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:3.6.14-4" date="1696680000">- Fix CVE-2023-5371</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1:3.6.14-5" date="1700568000">- Fix CVE-2023-6175</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:3.6.14-6" date="1704369600">- Fix CVE-2024-0208,CVE-2024-0209</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1:3.6.14-7" date="1711368000">- Fix CVE-2023-0666</changelog>
</package>
<package pkgid="7fc8b7348729bc085e5b7690d53c51070ddb86d1eb9686c2d0e961f3cba2cd92" name="wireshark" arch="src">
  <version epoch="1" ver="3.6.14" rel="8.oe2203sp1"/>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1:3.6.11-3" date="1682337600">- Fix CVE-2023-1992,CVE-2023-1993 and CVE-2023-1994</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1:3.6.11-4" date="1685448000">- Fix CVE-2023-0668,CVE-2023-2855,CVE-2023-2856,CVE-2023-2857,CVE-2023-2858 and CVE-2023-2879</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:3.6.14-1" date="1686830400">- Update to 3.6.14 for fix CVE-2023-0667,CVE-2023-2952</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 1:3.6.14-2" date="1690459200">- Fix CVE-2023-3648</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:3.6.14-3" date="1694001600">- Fix CVE-2023-3649,CVE-2023-2906,CVE-2023-4511,CVE-2023-4513</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:3.6.14-4" date="1696680000">- Fix CVE-2023-5371</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1:3.6.14-5" date="1700568000">- Fix CVE-2023-6175</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:3.6.14-6" date="1704369600">- Fix CVE-2024-0208,CVE-2024-0209</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1:3.6.14-7" date="1711368000">- Fix CVE-2023-0666</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1:3.6.14-8" date="1715774400">- Fix CVE-2024-4853,CVE-2024-4854 and CVE-2024-4855</changelog>
</package>
<package pkgid="d11944770727889f543593033f02dc1e7acc02727236c514183e9964952df60d" name="wireshark" arch="src">
  <version epoch="1" ver="3.6.14" rel="9.oe2203sp1"/>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1:3.6.11-4" date="1685448000">- Fix CVE-2023-0668,CVE-2023-2855,CVE-2023-2856,CVE-2023-2857,CVE-2023-2858 and CVE-2023-2879</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:3.6.14-1" date="1686830400">- Update to 3.6.14 for fix CVE-2023-0667,CVE-2023-2952</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 1:3.6.14-2" date="1690459200">- Fix CVE-2023-3648</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:3.6.14-3" date="1694001600">- Fix CVE-2023-3649,CVE-2023-2906,CVE-2023-4511,CVE-2023-4513</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:3.6.14-4" date="1696680000">- Fix CVE-2023-5371</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1:3.6.14-5" date="1700568000">- Fix CVE-2023-6175</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:3.6.14-6" date="1704369600">- Fix CVE-2024-0208,CVE-2024-0209</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1:3.6.14-7" date="1711368000">- Fix CVE-2023-0666</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1:3.6.14-8" date="1715774400">- Fix CVE-2024-4853,CVE-2024-4854 and CVE-2024-4855</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:3.6.14-9" date="1725019200">- Fix CVE-2024-8250</changelog>
</package>
<package pkgid="9e9c2c1bf7df774b281996ecaff9fe604a137321009d26e63ad0b527029ee882" name="wpa_supplicant" arch="src">
  <version epoch="1" ver="2.6" rel="32.oe2203sp1"/>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 1:2.6-31" date="1714046400">- Type:cves
- ID:CVE-2023-52160
- SUG:NA
- DESC:fix CVE-2023-52160</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 1:2.6-32" date="1723204800">- Type:cves
- ID:CVE-2024-5290
- SUG:NA
- DESC:fix CVE-2024-5290</changelog>
</package>
<package pkgid="15ca1cb2ebbaef1c1fd479a355d2993abada391c1f965ddc825e2887e5af85cd" name="wpebackend-fdo" arch="src">
  <version epoch="0" ver="1.6.1" rel="2.oe2203sp1"/>
  <changelog author="liukuo &lt;liukuo@kylinos.cn&gt; - 1.6.1-2" date="1659355200">- License compliance rectification</changelog>
</package>
<package pkgid="66d500072bd957e098c77a85e779ee1df91b69904467784e31a06d5c611c9a91" name="xerces-c" arch="src">
  <version epoch="0" ver="3.2.2" rel="5.oe2203sp1"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.2.2-5" date="1708516800">- Refix CVE-2018-1311</changelog>
</package>
<package pkgid="efc7be12d53779013274afca6723abf9bb94227c46f91f3fb29910749f465deb" name="xmlrpc-c" arch="src">
  <version epoch="0" ver="1.51.08" rel="3.oe2203sp1"/>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 1.51.08-3" date="1725969600">- Type:CVE
- CVE:CVE-2024-45490 CVE-2024-45491
- SUG:NA
- DESC:fix CVE-2024-45490 CVE-2024-45491</changelog>
</package>
<package pkgid="a0e5ef441e16ce459947297c7a08b1243f4c244c28d023356852a4c6ce4b19fe" name="xorg-x11-server" arch="src">
  <version epoch="0" ver="1.20.11" rel="16.oe2203sp1"/>
  <changelog author="ouyangminxiang&lt;ouyangminxiang@kylinsec.com.cn&gt; - 1.20.11-7" date="1658491200">- Fix the crash in shadowUpdatePacked because of memcpy acts randomly with overlapping areas.
- Fix the problem of black screen after entering the login interface</changelog>
  <changelog author="baiguo&lt;baiguo@kylinos.cn&gt; - 1.20.11-8" date="1658491201">- xkb: switch to array index loops to moving pointers
- fix CVE-2022-2319</changelog>
  <changelog author="wangkerong&lt;wangkerong@h-partners.com&gt; - 1.20.11-9" date="1659528000">- fix CVE-2022-2319,CVE-2022-2320</changelog>
  <changelog author="qz_cx &lt;wangqingzheng@kylinos.cn&gt; - 1.20.11-10" date="1666612800">- Type:CVE
- ID:NA
- SUG:NA
- DESC: fix CVE-2022-3551</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 1.20.11-11" date="1666785600">- Add sw64 architecture</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; -1.20.11-12" date="1668772800">- fix CVE-2022-3551,CVE-2022-3553</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; -1.20.11-13" date="1671624000">- fix CVE-2022-4283,CVE-2022-46340,CVE-2022-46341,CVE-2022-46342,CVE-2022-46343,CVE-2022-46344</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 1.20.11-14" date="1671710400">- Fix openEuler hard code problem
- use -git instead of .git as the filename, to avoid .git ignore
- Fix changelog date</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; -1.20.11-15" date="1673352000">- add missing patches</changelog>
  <changelog author="liweiganga &lt;liweiganga@uniontech.com&gt; -1.20.11-16" date="1676635200">- fix CVE-2023-0494</changelog>
</package>
<package pkgid="e56155f0368c0f42d96397ae6e7b872bcd44f9c50b4ca138ceaea63b2414e258" name="xorg-x11-server" arch="src">
  <version epoch="0" ver="1.20.11" rel="18.oe2203sp1"/>
  <changelog author="wangkerong&lt;wangkerong@h-partners.com&gt; - 1.20.11-9" date="1659528000">- fix CVE-2022-2319,CVE-2022-2320</changelog>
  <changelog author="qz_cx &lt;wangqingzheng@kylinos.cn&gt; - 1.20.11-10" date="1666612800">- Type:CVE
- ID:NA
- SUG:NA
- DESC: fix CVE-2022-3551</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 1.20.11-11" date="1666785600">- Add sw64 architecture</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; -1.20.11-12" date="1668772800">- fix CVE-2022-3551,CVE-2022-3553</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; -1.20.11-13" date="1671624000">- fix CVE-2022-4283,CVE-2022-46340,CVE-2022-46341,CVE-2022-46342,CVE-2022-46343,CVE-2022-46344</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 1.20.11-14" date="1671710400">- Fix openEuler hard code problem
- use -git instead of .git as the filename, to avoid .git ignore
- Fix changelog date</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; -1.20.11-15" date="1673352000">- add missing patches</changelog>
  <changelog author="liweiganga &lt;liweiganga@uniontech.com&gt; -1.20.11-16" date="1676635200">- fix CVE-2023-0494</changelog>
  <changelog author="liweiganga &lt;liweiganga@uniontech.com&gt; -1.20.11-17" date="1679313600">- feat: all man files is provided by help package</changelog>
  <changelog author="liweiganga &lt;liweiganga@uniontech.com&gt; -1.20.11-18" date="1681300800">- fix CVE-2023-1393</changelog>
</package>
<package pkgid="23820749ae696f5dfd8794633b39caf01d98ecb17da5c04dd99eaeb9f14a24d4" name="xorg-x11-server" arch="src">
  <version epoch="0" ver="1.20.11" rel="23.oe2203sp1"/>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 1.20.11-14" date="1671710400">- Fix openEuler hard code problem
- use -git instead of .git as the filename, to avoid .git ignore
- Fix changelog date</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1.20.11-15" date="1673352000">- add missing patches</changelog>
  <changelog author="liweiganga &lt;liweiganga@uniontech.com&gt; - 1.20.11-16" date="1676635200">- fix CVE-2023-0494</changelog>
  <changelog author="liweiganga &lt;liweiganga@uniontech.com&gt; - 1.20.11-17" date="1679313600">- feat: all man files is provided by help package</changelog>
  <changelog author="liweiganga &lt;liweiganga@uniontech.com&gt; - 1.20.11-18" date="1681300800">- fix CVE-2023-1393</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1.20.11-19" date="1682337600">- fix sw_64 build error and changelog error</changelog>
  <changelog author="leeffo &lt;liweiganga@uniontech.com&gt; - 1.20.11-20" date="1685102400">- fix CVE-2022-3550</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; -1.20.11-21" date="1694174400">- enable unit test</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; -1.20.11-22" date="1698321600">- fix CVE-2023-5367,CVE-2023-5380,CVE-2023-5574</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; -1.20.11-23" date="1699358400">- Rollback CVE-2023-5574 patch</changelog>
</package>
<package pkgid="a6854681a2bd50db6603743a97c72904fd3f7239358d2c2142b7027817220203" name="xorg-x11-server" arch="src">
  <version epoch="0" ver="1.20.11" rel="24.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1.20.11-15" date="1673352000">- add missing patches</changelog>
  <changelog author="liweiganga &lt;liweiganga@uniontech.com&gt; - 1.20.11-16" date="1676635200">- fix CVE-2023-0494</changelog>
  <changelog author="liweiganga &lt;liweiganga@uniontech.com&gt; - 1.20.11-17" date="1679313600">- feat: all man files is provided by help package</changelog>
  <changelog author="liweiganga &lt;liweiganga@uniontech.com&gt; - 1.20.11-18" date="1681300800">- fix CVE-2023-1393</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1.20.11-19" date="1682337600">- fix sw_64 build error and changelog error</changelog>
  <changelog author="leeffo &lt;liweiganga@uniontech.com&gt; - 1.20.11-20" date="1685102400">- fix CVE-2022-3550</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; -1.20.11-21" date="1694174400">- enable unit test</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; -1.20.11-22" date="1698321600">- fix CVE-2023-5367,CVE-2023-5380,CVE-2023-5574</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; -1.20.11-23" date="1699358400">- Rollback CVE-2023-5574 patch</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; -1.20.11-24" date="1702641600">- fix CVE-2023-6478 CVE-2023-6377</changelog>
</package>
<package pkgid="de207f0be0c9362a68798b9ee89e448781fccd7cc37342dafe0a0dc160429c7d" name="xorg-x11-server" arch="src">
  <version epoch="0" ver="1.20.11" rel="25.oe2203sp1"/>
  <changelog author="liweiganga &lt;liweiganga@uniontech.com&gt; - 1.20.11-16" date="1676635200">- fix CVE-2023-0494</changelog>
  <changelog author="liweiganga &lt;liweiganga@uniontech.com&gt; - 1.20.11-17" date="1679313600">- feat: all man files is provided by help package</changelog>
  <changelog author="liweiganga &lt;liweiganga@uniontech.com&gt; - 1.20.11-18" date="1681300800">- fix CVE-2023-1393</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1.20.11-19" date="1682337600">- fix sw_64 build error and changelog error</changelog>
  <changelog author="leeffo &lt;liweiganga@uniontech.com&gt; - 1.20.11-20" date="1685102400">- fix CVE-2022-3550</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; -1.20.11-21" date="1694174400">- enable unit test</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; -1.20.11-22" date="1698321600">- fix CVE-2023-5367,CVE-2023-5380,CVE-2023-5574</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; -1.20.11-23" date="1699358400">- Rollback CVE-2023-5574 patch</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; -1.20.11-24" date="1702641600">- fix CVE-2023-6478 CVE-2023-6377</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; -1.20.11-25" date="1705579200">- fix CVE-2024-21885,CVE-2024-21886,CVE-2024-0408,CVE-2024-0409,CVE-2024-6816,CVE-2024-0229</changelog>
</package>
<package pkgid="a359e549ea2874a21b179b58b3394156a774638075fc497ca4bf64cd72c31938" name="xorg-x11-server" arch="src">
  <version epoch="0" ver="1.20.11" rel="29.oe2203sp1"/>
  <changelog author="leeffo &lt;liweiganga@uniontech.com&gt; - 1.20.11-20" date="1685102400">- fix CVE-2022-3550</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; -1.20.11-21" date="1694174400">- enable unit test</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; -1.20.11-22" date="1698321600">- fix CVE-2023-5367,CVE-2023-5380,CVE-2023-5574</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; -1.20.11-23" date="1699358400">- Rollback CVE-2023-5574 patch</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; -1.20.11-24" date="1702641600">- fix CVE-2023-6478 CVE-2023-6377</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; -1.20.11-25" date="1705579200">- fix CVE-2024-21885,CVE-2024-21886,CVE-2024-0408,CVE-2024-0409,CVE-2023-6816,CVE-2024-0229</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@kylinsec.com.cn&gt; - 1.20.11-26" date="1706529600">- Modify sw_64 patch to use all arch</changelog>
  <changelog author="niuwanli &lt;niuwanli@cysoftware.com.cn&gt; - 1.20.11-27" date="1707134400">- fix segfault if CreateGC failed in XaceHook</changelog>
  <changelog author="zhangliangpengkun&lt;zhangliangpengkun@xfusion.com&gt; - 1.20.11-28" date="1709121600">- fix changelog The CVE is should be CVE-2023-6816.</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; -1.20.11-29" date="1712491200">- fix CVE-2024-31080 CVE-2024-31081 CVE-2024-31082 CVE-2024-31083</changelog>
</package>
<package pkgid="6caa2a75e6bbb1109f5e9f6cfd4c63e1e3edae1f8522b4917f3d24c6bca6ad29" name="xorg-x11-server" arch="src">
  <version epoch="0" ver="1.20.11" rel="30.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; -1.20.11-21" date="1694174400">- enable unit test</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; -1.20.11-22" date="1698321600">- fix CVE-2023-5367,CVE-2023-5380,CVE-2023-5574</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; -1.20.11-23" date="1699358400">- Rollback CVE-2023-5574 patch</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; -1.20.11-24" date="1702641600">- fix CVE-2023-6478 CVE-2023-6377</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; -1.20.11-25" date="1705579200">- fix CVE-2024-21885,CVE-2024-21886,CVE-2024-0408,CVE-2024-0409,CVE-2023-6816,CVE-2024-0229</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@kylinsec.com.cn&gt; - 1.20.11-26" date="1706529600">- Modify sw_64 patch to use all arch</changelog>
  <changelog author="niuwanli &lt;niuwanli@cysoftware.com.cn&gt; - 1.20.11-27" date="1707134400">- fix segfault if CreateGC failed in XaceHook</changelog>
  <changelog author="zhangliangpengkun&lt;zhangliangpengkun@xfusion.com&gt; - 1.20.11-28" date="1709121600">- fix changelog The CVE is should be CVE-2023-6816.</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; -1.20.11-29" date="1712491200">- fix CVE-2024-31080 CVE-2024-31081 CVE-2024-31082 CVE-2024-31083</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; -1.20.11-30" date="1713355200">- fix regression caused by the fix for CVE-2024-31083</changelog>
</package>
<package pkgid="e87de982e9036c149f1395d0b1accb16260c178c8d24fbf9147bad01a186f299" name="xorg-x11-server-Xwayland" arch="src">
  <version epoch="0" ver="22.1.2" rel="4.oe2203sp1"/>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 22.1.2-1" date="1655726400">- Package init</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 22.1.2-2" date="1656072000">- rename packagename</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 22.1.2-3" date="1714305600">- fix CVE-2024-31080 CVE-2024-31081</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 22.1.2-4" date="1714996800">- fix CVE-2023-6377 CVE-2023-6478 CVE-2023-6816 CVE-2024-0408 CVE-2024-0409</changelog>
</package>
<package pkgid="a9d36c13723e7a649018dab526eec494dac3d790e349e96f611fc973c17735c9" name="xorg-x11-server-Xwayland" arch="src">
  <version epoch="0" ver="22.1.2" rel="5.oe2203sp1"/>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 22.1.2-1" date="1655726400">- Package init</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 22.1.2-2" date="1656072000">- rename packagename</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 22.1.2-3" date="1714305600">- fix CVE-2024-31080 CVE-2024-31081</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 22.1.2-4" date="1714996800">- fix CVE-2023-6377 CVE-2023-6478 CVE-2023-6816 CVE-2024-0408 CVE-2024-0409</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 22.1.2-5" date="1715169600">- fix CVE-2024-0229 CVE-2024-31083</changelog>
</package>
<package pkgid="e04fd2ac7b6d50bd9619f293d8a910c342f9e413f770aea3c5cea3fad96bb373" name="xorg-x11-server-Xwayland" arch="src">
  <version epoch="0" ver="22.1.2" rel="6.oe2203sp1"/>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 22.1.2-1" date="1655726400">- Package init</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 22.1.2-2" date="1656072000">- rename packagename</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 22.1.2-3" date="1714305600">- fix CVE-2024-31080 CVE-2024-31081</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 22.1.2-4" date="1714996800">- fix CVE-2023-6377 CVE-2023-6478 CVE-2023-6816 CVE-2024-0408 CVE-2024-0409</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 22.1.2-5" date="1715169600">- fix CVE-2024-0229 CVE-2024-31083</changelog>
  <changelog author="technology208 &lt;technology@208suo.com&gt; - 22.1.2-6" date="1718193600">- fix  CVE-2022-2320</changelog>
</package>
<package pkgid="8aae44dd17f1c0770ca55bf32987a6c747ff49666d00684b952906b1c1d219f0" name="xstream" arch="src">
  <version epoch="0" ver="1.4.20" rel="1.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 1.4.18-2" date="1644235200">- Fix CVE-2021-43859</changelog>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt;  - 1.4.18-3" date="1668081600">- Change source</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1.4.20-1" date="1702382400">- Upgrade to 1.4.20 for fix CVE-2022-40151 and CVE-2022-41966</changelog>
</package>
<package pkgid="ccd6175ee7feac987d6f63ff8390edef944bf4ccce20409a6820d72dce45a9ba" name="yaffs2" arch="src">
  <version epoch="0" ver="9d9b662" rel="1.oe2203sp1"/>
  <changelog author="beiling.xie &lt;xiekunxun@huawei.com&gt; - b4ce1bb-1" date="1667390400">* Tue Feb 9 2021 tangchenyang &lt;tangchenyang2@huawei.com&gt; - b4celbb-1
- init</changelog>
  <changelog author="hanzongcheng &lt;hanzongcheng@huawei.com&gt; - 9d9b662-1" date="1692187200">- update to 9d9b662</changelog>
</package>
<package pkgid="6ac9a1a117d8255ce4b5ce69d845194fb8d891cb65c78c9b515dae538b84e5c2" name="yaffs2" arch="src">
  <version epoch="0" ver="9d9b662" rel="2.oe2203sp1"/>
</package>
<package pkgid="f74667b1f9ff1372107672b352eee248203a59bde3a0cfc4ae7cb00aa9e1b45e" name="yaml-cpp" arch="src">
  <version epoch="0" ver="0.6.3" rel="2.oe2203sp1"/>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 0.6.3-2" date="1718366400">- Add the support to parsing a null value.</changelog>
</package>
<package pkgid="6eb693095f7cb97382ff0d0d0db6f089e90792c349d5da0e534aabc2b7d15f38" name="yasm" arch="src">
  <version epoch="0" ver="1.3.0" rel="11.oe2203sp1"/>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 1.3.0-10" date="1666785600">- Add sw64 architecture</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 1.3.0-11" date="1691755200">- fix CVE-2023-37732</changelog>
</package>
<package pkgid="22aa054c57748d1df775f1ba7e068b9b23119058a9d3344f2404a52e7e5720f7" name="yasm" arch="src">
  <version epoch="0" ver="1.3.0" rel="12.oe2203sp1"/>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 1.3.0-10" date="1666785600">- Add sw64 architecture</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 1.3.0-11" date="1691755200">- fix CVE-2023-37732</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 1.3.0-12" date="1692100800">- fix CVE-2023-31975</changelog>
</package>
<package pkgid="1c56fcc5d801f739e2f7e6b49b591dfe2fa5e7b32c62b35c2eec8e8342c18bfc" name="yp-tools" arch="src">
  <version epoch="0" ver="4.2.3" rel="7.oe2203sp1"/>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 4.2.3-6" date="1654862400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:replace random with RAND_priv_bytes</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 4.2.3-7" date="1706788800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add haveged requires and optimize random number function replacement patch</changelog>
</package>
<package pkgid="0c2049a2000f0fd4f304719b47c9d395d7198473fee74189a7508f0b98411401" name="zbar" arch="src">
  <version epoch="0" ver="0.23.90" rel="1.oe2203sp1"/>
  <changelog author="Chen Chen &lt;chen_aka_jan@163.com&gt; - 0.22.0-2" date="1642248000">- remove autoreconf for fix build error</changelog>
  <changelog author="hkgy &lt;kaguyahatu@outlook.com&gt; - 0.23.90-1" date="1667995200">- Upgrade to v0.23.90</changelog>
</package>
<package pkgid="a51fa2cb3faab1ae259ce4a60484fedc42de080128d63b969304a4b9855db0a5" name="zbar" arch="src">
  <version epoch="0" ver="0.23.93" rel="1.oe2203sp1"/>
  <changelog author="hkgy &lt;kaguyahatu@outlook.com&gt; - 0.23.90-1" date="1667995200">- Upgrade to v0.23.90</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 0.23.93-1" date="1706875200">- Update to 0.23.93 for fix CVE-2023-40889,CVE-2023-40890</changelog>
</package>
<package pkgid="8996e46609b2e47c4918acb5a65d987f33b13db27b32fa0af857118328111294" name="zlib" arch="src">
  <version epoch="0" ver="1.2.11" rel="23.oe2203sp1"/>
  <changelog author="Jun Yang &lt;jun.yang@suse.com&gt; - 1.2.11-19" date="1635768000">- list all the patches for aarch64 to make the source rpm same both for x86_64 and aarch64.</changelog>
  <changelog author="tinawei &lt;tianwei12@h-partners.com&gt; - 1.2.11-20" date="1651060800">- Fix CVE-2018-25032</changelog>
  <changelog author="tinawei &lt;tianwei12@h-partners.com&gt; - 1.2.11-21" date="1652184000">- Fix patches info for pre</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 1.2.11-22" date="1660305600">- fix CVE-2022-37434</changelog>
  <changelog author="zhoupengcheng &lt;zhoupengcheng11@huawei.com&gt; - 1.2.11-23" date="1672056000">- DESC:remove unapplied patch</changelog>
</package>
<package pkgid="d069cb956f97117c19d0893739b0b2b84f2fb09d68ace0ad09c6aa472273358d" name="zlib" arch="src">
  <version epoch="0" ver="1.2.11" rel="24.oe2203sp1"/>
  <changelog author="Jun Yang &lt;jun.yang@suse.com&gt; - 1.2.11-19" date="1635768000">- list all the patches for aarch64 to make the source rpm same both for x86_64 and aarch64.</changelog>
  <changelog author="tinawei &lt;tianwei12@h-partners.com&gt; - 1.2.11-20" date="1651060800">- Fix CVE-2018-25032</changelog>
  <changelog author="tinawei &lt;tianwei12@h-partners.com&gt; - 1.2.11-21" date="1652184000">- Fix patches info for pre</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 1.2.11-22" date="1660305600">- fix CVE-2022-37434</changelog>
  <changelog author="zhoupengcheng &lt;zhoupengcheng11@huawei.com&gt; - 1.2.11-23" date="1672056000">- DESC:remove unapplied patch</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 1.2.11-24" date="1697544000">- DESC:Fix CVE-2023-45853</changelog>
</package>
<package pkgid="52579b94585ced74283b55569a1f0e35a5e78bb2f0dbb1029d6e0218369bab5b" name="zstd" arch="src">
  <version epoch="0" ver="1.5.0" rel="4.oe2203sp1"/>
  <changelog author="shixuantong &lt;shixuantong@huawei.com&gt; - 1.5.0-1" date="1640088000">- update version to 1.5.0</changelog>
  <changelog author="yanglongkang &lt;yanglongkang@h-partners.com&gt; - 1.5.0-2" date="1666699200">- rebuild for next release</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 1.5.0-3" date="1676548800">- enable check</changelog>
  <changelog author="zhoupengcheng &lt;zhoupengcheng11@huawei.com&gt; - 1.5.0-4" date="1680609600">* fix CVE-2022-4899</changelog>
</package>
<package pkgid="92389863723cb19b0b069a7d7df8bfcb734148d01d3df2e6dbd506106ff8e4f2" name="zziplib" arch="src">
  <version epoch="0" ver="0.13.71" rel="5.oe2203sp1"/>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 0.13.71-4" date="1666785600">- Add sw64 architecture</changelog>
  <changelog author="licihua &lt;licihua@huawei.com&gt; - 0.13.71-5" date="1695816000">- fix CVE-2020-18770</changelog>
</package>
</otherdata>